SUSE Linux Enterprise 11 Administration Workbook

Transcription

1 SUSE Linux Enterprise 11 Administration Workbook 3102 Novell Training Services AUTHORIZED COURSEWARE Novell Training Services (en) 15 April 2009 Part # REV A

2 Novell Training Services (en) 15 April 2009 Legal Notices Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes. Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the Novell International Trade Services Web page ( / for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals. Copyright 2008 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher. Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed on the Novell Legal Patents Web page ( company/legal/patents/) and one or more additional patents or pending patent applications in the U.S. and in other countries. Novell, Inc. 404 Wyman Street, Suite 500 Waltham, MA U.S.A. Online Documentation: To access the latest online documentation for this and other Novell products, see the Novell Documentation Web page ( Novell Trademarks For Novell trademarks, see the Novell Trademark and Service Mark list ( Third-Party Materials All third-party trademarks are the property of their respective owners.

3 Contents Introduction 7 Check the Media in Your Student Kit 7 Set Up Your Practice Environment 8 Review the Setup Requirements 8 Review the Setup Diagram 9 Prepare Your Host Workstation 10 Review Exercise Issues and Tips 14 Memory Issues 14 Exercise Tips 14 Browser Issues 14 Exercise Notes 14 Review the Course Scenario 15 Review the Exercise Conventions 15 Novell Training Services (en) 15 April 2009 SECTION 1 Install SUSE Linux Enterprise Exercise 1-1 Install SUSE Linux Enterprise Server Exercise 1-2 Install SUSE Linux Enterprise Desktop SECTION 2 Manage System Initialization 31 Exercise 2-1 Manage the Boot Loader Exercise 2-2 Manage Runlevels Part I: View and Change the Current Runlevel Part II: Activate the atd Service Part III: Set a Runlevel at Boot Time Part IV: Enable rsyncd with YaST SECTION 3 Administer Linux Processes and Services 43 Exercise 3-1 Manage Linux Processes Part I: Move Processes to the Background Part II: Modify Process Priorities SECTION 4 Administer the Linux File System 49 Exercise 4-1 Configure Partitions on your Hard Drive Part I: Create Partitions and File Systems with YaST Part II: Partition Manually with fdisk Part III: Manage File Systems from the Command Line Exercise 4-2 Manage File Systems from the Command Line

4 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Part I: Run e2fsck Part II: Customize the File Systems Exercise 4-3 Create Logical Volumes Part I: Create LVM Physical Volumes, a Volume Group, and Logical Volumes. 66 Part II: Resize an LVM Volume Exercise 4-4 Set Up and Configure Disk Quotas SECTION 5 Configure the Network Manually 77 Exercise 5-1 Configure the Network Connection Manually Part I: Note the Current Network Configuration Part II: Delete the Current Network Setup with YaST Part III: Configure the Network Manually Part IV: Save the Network Connection to an Interface Configuration File SECTION 6 Manage Hardware 83 Exercise 6-1 Manage Linux Kernel Modules Exercise 6-2 Obtain Hardware Configuration Information in YaST Exercise 6-3 Modify udev Rules SECTION 7 Configure Remote Access 93 Exercise 7-1 Practice Using OpenSSH Exercise 7-2 Perform Public Key Authentication Exercise 7-3 Use Remote Administration Part I: Remotely Access a Text-Based Version of YaST Part II: Remotely Access the GUI Version of YaST Part III: Configure Remote Administration with YaST Part IV: Access Your DA1 Server Remotely Exercise 7-4 Use Nomad SECTION 8 Monitor SUSE Linux Enterprise Exercise 8-1 Gather Information on your SLES 11 Server Exercise 8-2 Manage System Logging Part I: Modify the syslog-ng Configuration Part II: Configure logrotate SECTION 9 Administer Linux Processes and Services 121 Exercise 9-1 Schedule Jobs with cron and at Part I: Schedule Jobs with at Part II: Schedule Jobs with cron SECTION 10 Manage Backup and Recovery 127 Exercise 10-1 Back Up System Files with YaST Exercise 10-2 Create Backup Files with tar

5 Part I: Create a Full Backup Part II: Create an Incremental Backup Exercise 10-3 Create Drive Images with dd (Optional) Exercise 10-4 Back Up a Home Directory with rsync Part I: Perform a Local Backup with rsync Part II: Perform a Remote Backup with rsync Exercise 10-5 Configure a cron Job for Data Backups SECTION 11 Administer User Access and Security 141 Exercise 11-1 Configure PAM Authentication Exercise 11-2 Configure sudo Exercise 11-3 Configure the Password Security Settings Exercise 11-4 Use ACLs Part I: Configure the ACL of a Directory Part II: Configure a Default ACL for a Directory Part III: Delete an ACL Exercise 11-5 Configure SuSEfirewall Novell Training Services (en) 15 April

6 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 6

7 Introduction Introduction This workbook is designed to help you practice the skills associated with SUSE Linux Enterprise 11 Administration (Course 3102) objectives. These skills, along with those taught in SUSE Linux Enterprise 11 Fundamentals (Course 3101), prepare you to take the Novell Certified Linux Administrator 11 (Novell CLA 11) certification test. Before starting the exercises in this workbook, you need do the following: Check the Media in Your Student Kit on page 7 Set Up Your Practice Environment on page 8 Review Exercise Issues and Tips on page 14 Review the Course Scenario on page 15 Review the Exercise Conventions on page 15 Novell Training Services (en) 15 April 2009 Check the Media in Your Student Kit Your 3102 student kit contains the following items: 3102 Course Manual: Printed course manual that contains instructional and reference content Workbook: Printed workbook that contains step-by-step instructions for setting up and completing the 3102 course exercises Course DVD: Contains the course manual and workbook in PDF format as well as a readme file. It also contains the following folders that contain various files required for completing the lab exercises for this course: Setup: Contains files used for the course setup. Exercises: Contains files used for the course exercises. Docs: Contains the SUSE Linux Enterprise 11 documentation, which is also available from ( SUSE Linux Enterprise Server 11 DVD: SLES 11 installation media you will use to complete your lab exercises. SUSE Linux Enterprise Desktop 11 DVD: SLED 11 installation media you will use to complete your lab exercises. 7

8 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Set Up Your Practice Environment Set up your practice by completing the following: Review the Setup Requirements on page 8 Review the Setup Diagram on page 9 Prepare Your Host Workstation on page 10 Review the Setup Requirements The following are the hardware and software requirements for your practice environment: Table Intro-1 Setup Hardware Minimum Requirements You need one host computer that meets the following requirements: Pentium IV 2 GHz (or faster) computer 2 GB RAM (4 GB recommended): 1024 MB (DA1 virtual server) 512 MB (DA-SLED virtual workstation) 40 GB (or more) hard disk space DVD drive Make sure that the host computer is actually utilizing all of the installed RAM. If not, the exercises may run extremely slowly or even stall. Software To complete the practice environment setup, you need the following software: 3102 Course DVD (included in your student kit), which contains software and files needed to complete the course exercises SUSE Linux Enterprise Server 11 DVD, which contains the SLES 11 installation media you will use to complete your lab exercises. SUSE Linux Enterprise Desktop 11 DVD, which contains the SLED 11 installation media you will use to complete your lab exercises. 8

9 Review the Setup Diagram Introduction In this course, your host computer will run multiple virtual machines concurrently. The following depicts the relationship between the host computer and the virtual machines: Novell Training Services (en) 15 April 2009 The following table lists the details about each virtual machine used in this course: Table Intro-2 Virtual Machine Details DA1 Hostname: da1.digitalairlines.com Operating system: SUSE Linux Enterprise Server 11 IP address: Subnet mask: Login information: Super user: root Password: novell 9

10 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Virtual Machine Details DA-SLED Hostname: da-sled.digitalairlines.com Operating system: SUSE Linux Enterprise Desktop 11 IP address: Subnet mask: Login information: Super user: root Password: novell Prepare Your Host Workstation To complete the lab exercises in this course, you must first install and configure VMware virtualization software on your host workstation. To do this, complete the following: 1. Install SLED 11 on your host workstation. During the installation, install the C/C++ Compiler and Tools pattern, as shown below: During the installation, configure the following user accounts: geeko with a password of novell geeko with a password of novell 2. Configure the network interface on the workstation to use the Traditional Method with ifup network setup method instead of NetworkManager. 10

11 3. Install VMware Workstation on your host workstation. Introduction VMware is virtualization software that allows you to run an operating system in parallel to your existing operating system installation. You can use VMware to install and configure multiple guest operating systems on your computer without repartitioning your disks. In the first exercise in this course, you will install a virtual SLES 11 server and a virtual SLED 11 workstation that you will use to complete the remaining exercises in the course. If you do not have VMware on your system, you can download a copy from the VMware Web site at ( You can choose between the following products: VMware Server: Free version of the VMware product. It can be used to create, modify, and run VMware images. It does not allow you to create snapshots, however. VMware Workstation: Full-featured version of VMware. The software can be used to create, modify, and run VMware images. You can either purchase the software or get a free 30 days evaluation key. VMware Player: Free version of the VMware product. It can run existing virtual machines, but it can not be used to create VMware images nor does it allow you to create snapshots. Novell Training Services (en) 15 April 2009 NOTE: If you need help installing a VMware product, visit ( pubs/). 4. Configure vmnet5 in VMware: a. Select Computer > More Applications > System > Virtual Network Editor. b. When prompted, enter your root user's password. 11

12 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook The following is displayed: c. Select vmnet1. d. In the Subnet IP field, enter , as shown below: e. Select Save. f. Open a terminal window and use the su - command to switch to your root user account. g. At the shell prompt, enter vi /etc/vmware/networking. h. Press Ins; then scroll down to the answer VNET_1_HOSTONLY_NETMASK line. i. Change this line to answer VNET_1_HOSTONLY_NETMASK j. Press Esc; then enter :exit. 12

13 k. Select Computer > More Applications > System > Virtual Network Editor again. l. When prompted, enter your root user's password. Introduction m. Select vmnet1 and verify that the subnet mask has changed to , as show below: Novell Training Services (en) 15 April 2009 n. Select Save. o. Shut down and restart the workstation. p. When the workstation has rebooted, log in and then open a terminal window. q. Switch to root using the su - command. r. At the shell prompt, enter ifconfig. Verify that your host s vmnet1 virtual network adapter has been assigned an IP address of and a subnet mask of , as shown below: 5. Create the following folders on your host s hard drive: /isos/3102 /vms/ Copy the course ISO files from the Exercises folder on your course DVD to the / isos/3102 folder on your hard drive. 7. Copy the course virtual machine files from the Setup folder on your course DVD to the /vms/3102 directory on your hard drive. 8. Configure the hot keys used to release the focus from the virtual machine by doing the following: a. In the VMware window, select Edit > Preferences > Hot Keys. b. Mark Ctrl + Shift + Alt. c. Select OK. 13

14 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Review Exercise Issues and Tips Before starting the exercises, make sure you review the following: Memory Issues on page 14 Exercise Tips on page 14 Browser Issues on page 14 Exercise Notes on page 14 Memory Issues Although you perform the exercises with 2 GB of RAM on the host machine, the processing time for performing some administration tasks will be significantly slower than in a real hardware environment. Additional memory will increase the overall speed of the system. Exercise Tips Following are some tips that can help you when using this workbook to complete exercises: Exercise sequence: Although there are many tasks in the exercises that can be done at any time, the exercises often rely on tasks performed in earlier exercises. For this reason, it s recommended that you perform the exercises in sequence to successfully complete all exercises. Keyboard entry problems: If you cannot use the keyboard to enter text, try selecting the virtual machine window with the mouse or try pressing Shift+Tab. Virtual machine shutdown: Before powering off a virtual machine, make sure you shut down the guest operating system cleanly first. Browser Issues Most of the labs in this course direct you to use a browser within the various virtual machines. This worked well during the testing of the labs and reduces dependencies on the host workstation. However, if you find using a browser within a virtual machine cumbersome or slow, you can use a browser on the host workstation instead. Exercise Notes Review the following notes prior to completing the lab exercises in this course: Table Intro-3 Exercise Exercise 2-2, Part III Notes At the end of Part III, students may have to reboot the system to be able to log back in as geeko. 14

15 Review the Course Scenario Introduction The IT department of Digital Airlines is rolling out more and more SUSE Linux Enterprise 11 installations. Your task is to familiarize yourself with SUSE Linux Enterprise 11 to be able to take on a greater number of system administrator tasks on this platform. You need additional experience in the following areas: Installation and configuration of SUSE Linux Enterprise 11 File system maintenance Specialized aspects of user management (such as ACLs) Network configuration and fundamental network services Hardware management Backup and recovery Management of services and processes Remote administration Novell Training Services (en) 15 April 2009 You decide to set up test servers and workstations in the lab to enhance your skills in these areas. Review the Exercise Conventions When working through an exercise, you will see conventions that indicate information you need to supply that is specific to your server. 15

16 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook The following describes the most common conventions: italicized/bolded text: This is a reference to a variable that is unique to your situation, such as the hostname of your server. For example, if the hostname of your server is DA1, and you see the following, hostname.digitalairlines.com then you would enter DA1.digitalairlines.com xx: This is the IP address that is assigned to your SUSE Linux Enterprise system. For example, if your IP address is , and you see the following: xx then you would enter Select: The word select is used in exercise steps to indicate a variety of actions including clicking a button on the interface and selecting a menu item. Enter and Type: The words enter and type have distinct meanings. The word enter means to type text in a field or at a command line and press the Enter key when necessary. The word type means to type text without pressing the Enter key. If you are directed to type a value, make sure you do not also press the Enter key or you might activate a process that you are not ready to start. 16

17 SECTION 1 Install SUSE Linux Enterprise 11 In this section of the workbook, you learn how to do the following: Install SUSE Linux Enterprise Server 11 on page 18 In this exercise, you install SUSE Linux Enterprise Server 11. Install SUSE Linux Enterprise Desktop 11 on page 25 In this exercise, you install SUSE Linux Enterprise Desktop 11. Install SUSE Linux Enterprise 11 Novell Training Services (en) 15 April

18 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 1-1 Install SUSE Linux Enterprise Server 11 In this exercise, you install a SUSE Linux Enterprise Server 11 system. Use the following specifications as a guideline for the installation: Create the following partitions: 1 GB swap partition. 6 GB for / (You should leave unpartitioned space on the hard disk to add partitions in later exercises). Use default software patterns, but add the C/C++ Compiler and Tools pattern. root password: novell NOTE: This password is not appropriate for a production environment. Use a static IP address: IP address: Network mask: Hostname: da1 Domain name: digitalairlines.com Name server: none Default gateway: none Use local authentication. Create a geeko user account with a password of novell. Skip the online update. Do the following: 1. Insert your SLES 11 installation DVD into your host workstation s DVD drive. 2. On your host workstation, start VMware Workstation. 3. In VMware, select File > Open. 4. Browse to and select the /vms/3102/da1/da1.vmx file. 5. Select Power On This Virtual Machine. 6. If prompted to create a new identifier for the virtual machine, select Keep; then click OK. 7. When the GRUB installation screen appears, select Installation with the arrow keys and then press Enter. Wait while Linux is loaded and the YaST Installation module starts. 8. In the Language Selection dialog, select your language and your keyboard layout. NOTE: Although you can select any available language, the exercises in this manual are written for English US. 18

19 Install SUSE Linux Enterprise In the License Agreement field, select I Agree to the License Terms; then click Next. 10. In the Media Check screen, select Start Check. Wait while the media is checked. 11. When the media check is complete, click Next. Wait while the system hardware is probed. 12. In the Installation Mode dialog, select New Installation; then click Next. 13. In the Clock and Time Zone dialog, select your time zone. 14. Deselect Hardware Clock Set To UTC. 15. Adjust the date and time to the correct parameters, if needed. 16. When done, click Next. 17. In the Server Base Scenario screen, select Physical Machine; then click Next. The Installation Settings proposal dialog appears. 18. Change the partitioning settings by selecting Partitioning. 19. Select Custom Partitioning (for experts); then click Next. 20. Create a swap partition by doing the following: a. Under System View, select Hard Disks > sda. b. Select Add. c. Select Primary Partition; then click Next. d. Select Custom Size; then enter a size of 1 GB. e. Click Next. f. From the File System drop-down list, select Swap. g. Add the swap partition by clicking Finish. 21. Create the root partition by doing the following: a. Select Add. b. Select Primary Partition; then click Next. c. Select Custom Size; then enter a size of 6 GB. d. Click Next. e. Configure the following options: Select Ext3 from the File System drop-down list. Select / from the Mount Point drop-down list. f. Add the root partition by clicking Finish. Novell Training Services (en) 15 April

20 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 1-1 Your partitions should appear as shown below: 22. Confirm the partitioning setup and return to the installation proposal by clicking Accept. 23. In the Installation Settings Overview, select Software. 20

21 Figure 1-2 Install SUSE Linux Enterprise Under Patterns, scroll down to and select C/C++ Compiler and Tools, as shown below: Novell Training Services (en) 15 April Click OK. 26. If prompted to accept license agreements for packages to be installed, select Accept. 27. In the Installation Settings dialog, click Install. 28. In the confirmation dialog, click Install. Wait while the disk is partitioned and the packages are installed. This may take up to 30 minutes to complete. 29. In the Password for the System Administrator root screen, enter novell in the password fields. 30. Click Next. 31. When warned that the password is too simple, click Yes. 32. When warned that the password uses only lowercase letters, click Yes. 33. In the Hostname and Domain Name dialog, enter DA1 in the Hostname field and digitalairlines.com in the Domain Name field. 34. Deselect Change Hostname via DHCP. 35. Select Write Hostname to /etc/hosts; then click Next. 21

22 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 36. In the Network Configuration screen under Firewall, click Open next to SSH Port is Blocked. The entry will change to SSH Port is Open. 37. Select Network Interfaces. 38. Select the first detected network card; then click Edit. 39. Select Statically Assigned IP Address. 40. In the IP Address field, enter In the Subnet Mask field, enter In the Hostname field, enter DA Click Next. 44. Select the Hostname/DNS tab. Your hostname and domain name should already be filled. If not, enter a hostname of DA1 and the domain name digitalairlines.com. NOTE: Because this virtual machine runs in host-only mode, it is isolated from the rest of your network. In a production environment, you would configure one or more DNS server addresses and a gateway router address. 45. Return to the Network Configuration dialog by selecting OK. 46. Continue with the installation by clicking Next. 47. In the Test Internet Connection dialog, select No, Skip This Test; then click Next. 48. In the Installation Overview dialog, accept the default settings by clicking Next. 49. In the User Authentication Method screen, select Local (/etc/passwd); then click Next. 50. In the New Local User screen, add a user named geeko by entering the following: User s Full Name: Geeko Novell User Login: geeko Password: novell 51. Create the user by clicking Next. 52. Confirm the password warnings by clicking Yes twice. 53. In the Release Notes screen, review the release notes; then click Next. 54. In the Hardware Configuration dialog, review the settings suggested under Graphics Cards; then click Next. 55. Complete the installation process by clicking Finish. Wait while the system is cloned and the graphical login is loaded. 22

23 56. Edit your hosts file by doing the following: a. Log in to your DA1 server as geeko with a password of novell. b. Select Computer > YaST. c. When prompted, enter a root password of novell. d. In YaST, select Network Services > Hostnames. e. Click Add. f. Specify the following: IP Address: Hostname: DA-SLED.digitalairlines.com Alias: DA-SLED g. Click OK. h. Click Finish. i. Close YaST. Install SUSE Linux Enterprise Install VMware Tools in your SLES 11 virtual machine by doing the following: a. In your VMware window, select VM > Removable Devices > CD-ROM > Disconnect. b. In your VMware window, select VM > Install VMware Tools > Install. c. When prompted for the root user s password, enter novell. A File Browser window opens displaying the files on the VMware Tools ISO image. d. Right-click the VMware Tools RPM file; then select Open with Install Software. e. When prompted for the root user s password, enter novell. Wait while the package is installed. f. When complete, close the File Browser window. g. Right-click the VMware Tools icon on the desktop; then select Unmount Volume. h. In your VMware window, select VM > Cancel VMware Tools Install. i. In your VMware window, select VM > Removable Devices > CD-ROM > Connect. j. When prompted for the root user s password, enter novell and click Authenticate. k. Close the File Browser window. l. Right-click the desktop; then select Open In Terminal. m. At the shell prompt, enter su - followed by a password of novell and click Authenticate. n. At the shell prompt, enter vmware-config-tools.pl. Novell Training Services (en) 15 April

24 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook o. When prompted to build the vmhgfs module, enter yes. p. When prompted for the location of the C header files, press Enter. q. When prompted to build the vmxnet module, enter yes. r. When prompted to configure your screen resolution, enter the appropriate menu option for 1024x768. s. Reboot the system by entering init 6 at the shell prompt. (End of Exercise) 24

25 Exercise 1-2 Install SUSE Linux Enterprise Desktop 11 Install SUSE Linux Enterprise 11 In this exercise, you install a SUSE Linux Enterprise Desktop 11 system. Use the following specifications as a guideline for the installation: Use the default partitions proposed by YaST. Use default software selection, but add the C/C++ Compiler and Tools pattern. root password: novell NOTE: This password is not appropriate for a production environment. Novell Training Services (en) 15 April 2009 Use a static IP address: IP address: Network mask: Hostname: da-sled Domain name: digitalairlines.com Name server: none Default gateway: none Use local authentication. Create a geeko user account with a password of novell. Skip the online update. Do the following: 1. If it s running, suspend your DA1 virtual server. 2. Insert your SLED 11 installation DVD into your host workstation s DVD drive. 3. In VMware, select File > Open. 4. Browse to and select the /vms/3102/da-sled/da-sled.vmx file. 5. Select Power On This Virtual Machine. 6. If prompted to create a new identifier for the virtual machine, select Keep; then click OK. 7. When the GRUB installation screen appears, select Installation with the arrow keys and press Enter. Wait while Linux is loaded and the YaST Installation module starts. 8. In the Language Selection dialog, select your language and your keyboard layout. 9. In the License Agreement field, select I Agree to the License Terms; then click Next. 10. In the Media Check screen, click Start Check. Wait while the media is checked. 11. When the media check is complete, click Next. 25

26 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 1-3 Wait while the system s hardware is probed. 12. In the Installation Mode dialog, select New Installation; then click Next. 13. In the Clock and Time Zone dialog, select your time zone. 14. Deselect Hardware Clock Set To UTC. 15. Adjust the date and time to the correct parameters, if needed. 16. When done, click Next. The following is displayed: 17. Create a new standard user by specifying the following: User s Full Name: Geeko Chameleon Username: geeko Password: novell 18. Select Use This Password for System Administrator; then click Next. 19. When prompted that the password is too simple, click Yes. 20. When prompted that the password uses only lower case letters, click Yes. The Installation Settings proposal dialog appears. 21. In the Installation Settings Overview, select Software. 26

27 Figure 1-4 Install SUSE Linux Enterprise Under Patterns, scroll down to and select C/C++ Compiler and Tools, as shown below: Novell Training Services (en) 15 April Click OK. 24. If prompted to accept license agreements for packages to be installed, select Accept until you return to the installation proposal. 25. In the Installation Settings Overview, click Install. 26. In the confirmation dialog, click Install. Wait while the disk is partitioned and the packages are installed. This may take up to 45 minutes to complete. 27

28 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure At this point, your installation is complete. YaST displays the following: 28. Complete the installation process by clicking Finish. Wait while the graphical login is loaded. 29. Assign a static IP address to your virtual SLED 11 workstation by doing the following: a. Log in to your DA-SLED workstation as geeko with a password of novell. b. Select Computer > YaST. c. When prompted for the root user s password, enter novell. d. Select Network Devices > Network Settings. e. When prompted that your network settings are currently managed by NetworkManager, click OK. f. Select Traditional Method with ifup; then click OK. g. In YaST, select Network Devices > Network Settings again. h. Select your network interface, then click Edit. i. Select Statically Assigned IP Address; then specify the following: IP Address: Subnet Mask: Hostname: DA-SLED j. Click Next. 28

29 k. Select the Hostname/DNS tab; then specify the following: Hostname: DA-SLED Domain Name: digitalairlines.com l. Click OK. 30. Edit your hosts file by doing the following: a. In YaST, select Network Services > Hostnames. b. Click Add. c. Specify the following: IP Address: Hostname: DA1.digitalairlines.com Alias: DA1 d. Click OK. e. Click Finish. f. Close YaST. Install SUSE Linux Enterprise Install VMware Tools in your SLES 11 virtual machine by doing the following: a. Right-click the DVD icon on your desktop; then select Unmount Volume. b. In your VMware window, select VM > Removable Devices > CD-ROM > Disconnect. c. In your VMware window, select VM > Install VMware Tools > Install. A File Browser window opens displaying the files on the VMware Tools ISO image. d. Right-click the VMware Tools RPM file; then select Open with Install Software. e. Select Install. f. When prompted for the root user s password, enter novell. Wait while the package is installed. g. When complete, close the File Browser window. h. Right-click the VMware Tools icon on the desktop; then select Unmount Volume. i. In your VMware window, select VM > Cancel VMware Tools Install. j. In your VMware window, select VM > Removable Devices > CD-ROM > Connect. k. Right-click on the desktop; then select Open In Terminal. l. At the shell prompt, enter su - followed by a password of novell. m. At the shell prompt, enter vmware-config-tools.pl. n. When prompted to build the vmhgfs module, enter yes. o. When prompted for the location of the C header files, press Enter. Novell Training Services (en) 15 April

30 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook p. When prompted to build the vmxnet module, enter yes. q. When prompted to configure your screen resolution, enter the appropriate menu option to specify 1024x768. r. Reboot the system by entering init 6 at the shell prompt. (End of Exercise) 30

31 SECTION 2 Manage System Initialization In this section of the workbook, you learn how to do the following: Manage the Boot Loader on page 32 Manage System Initialization In this exercise, you practice booting into a shell and modifying /boot/grub/ menu.lst. Manage Runlevels on page 37 In this exercise, you practice configuring runlevels. Novell Training Services (en) 15 April

32 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 2-1 Manage the Boot Loader In this exercise, you practice booting into a shell and modifying /boot/grub/menu.lst. You enter init=/bin/bash at the boot prompt and modify /boot/grub/menu.lst to require a password before kernel parameters can be modified. You then test the new GRUB configuration. NOTE: This exercise will not work with SUSE Linux Enterprise 11 running on physical hardware with a USB keyboard. USB drivers are usually loaded late in the init process. If your machine is equipped with a USB keyboard, you have to add the modules to the initial RAM disk for this exercise to work. To do this with a USB keyboard, complete the following steps first: Find out which USB modules are loaded by entering lsmod in a terminal window. Then start the YaST Control Center, and select System > /etc/sysconfig Editor. Expand System > Kernel. In INITRD_MODULES, add the appropriate modules (such as usbhid, uhdi_hcd, and/or ehci_hcd). Close the dialogs. In a terminal window (as root), enter mkinitrd. Complete the following: 1. If your DA-SLED virtual workstation is running, suspend it. 2. If your DA1 virtual server is suspended, resume it. 3. If necessary, log in to DA1 as geeko with a password of novell. 4. Right-click on the desktop; then select Open in Terminal. 5. In the terminal window, enter su - followed by a password of novell. 6. Reboot the system by entering init 6 at the shell prompt. 7. When the GRUB boot menu is displayed, press Space to stop the timer. 8. In the Boot Options field, replace the vga=0x332 option with init=/bin/bash. 32

33 Figure 2-1 An example is shown below: Manage System Initialization Novell Training Services (en) 15 April Press Enter. After a few minutes, the bash prompt is displayed: Figure Remount the root partition read-writable by entering mount -o remount,rw, sync / 33

34 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 11. At the shell prompt, enter vi /boot/grub/menu.lst. 12. Press Ins. 13. Position the cursor at the beginning of the line starting with gfxmenu. 14. Comment out the line by inserting a pound sign (#) in front of the line starting with gfxmenu. 15. To avoid having the password displayed in clear-text in the configuration file, create an MD5-Hash encrypted password by doing the following within vi: a. Add a new, blank line after the gfxmenu line you just commented out. b. Press Esc. c. Enter :r! echo -e secret\nsecret grub-md5-crypt. This runs an external command from within the vi editor. The echo command sends the secret and secret text strings to the standard input of the grub-md5-crypt command. The grub-md5-crypt command uses these strings as input for its Password: and Retype Password: prompts. It then encrypts the password. The output from grub-md5-crypt command is inserted into the file, including the encrypted password: Figure 2-3 d. Arrow up to the line that reads stty: standard input: Invalid argument. e. Type dd to delete the line. f. Repeat this process to delete the following lines: Password: Retype Password: stty: standard input: Invalid argument 34

35 Figure 2-4 g. Press Ins. Manage System Initialization h. At the beginning of the line with the encrypted password, enter password -- md5. An example is shown below: Novell Training Services (en) 15 April 2009 Your hash value will be different than that shown above. i. Save the file by pressing Esc and then entering :wq. 16. Reset the computer by entering reboot at the shell prompt. You will notice that the start screen looks different now, because you turned off the graphical menu. 35

36 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 17. If you want to edit the kernel command line, press p and then enter a password of secret. 18. Select the SUSE Linux Enterprise Server 11 menu option and press Enter. Wait while the system boots. 19. Undo the changes in /boot/grub/menu.lst: a. Log in as geeko with a password of novell. b. Open a terminal window and su - to root using a password of novell. c. At the shell prompt, enter vi /boot/grub/menu.lst. d. Press Ins. e. Put a comment sign (#) at the beginning of the line beginning with password. f. Remove the comment sign in front of the line starting with gfxmenu. g. Save the file and close vi by pressing Esc and entering :wq. h. At the shell prompt, enter exit > exit. (End of Exercise) 36

37 Exercise 2-2 Manage Runlevels Manage System Initialization In this exercise, you practice configuring runlevels. This exercise has four parts. In the first part, you use the runlevel command to determine the current runlevel. You also use the init command to change to runlevel 3 and then back to 5. In the second part, you activate the at service atd. In the third part, you reboot your computer and boot into runlevel 3 instead of the default runlevel 5. You then login and switch to back to runlevel 5. In the fourth part, you activate the rsync daemon using the YaST runlevel editor. Complete the following: Part I: View and Change the Current Runlevel on page 37 Part II: Activate the atd Service on page 38 Part III: Set a Runlevel at Boot Time on page 40 Part IV: Enable rsyncd with YaST on page 41 Part I: View and Change the Current Runlevel To view and change the current runlevel, do the following: 1. If necessary, log in to your DA1 server as geeko with a password of novell. 2. Open a terminal window and su - to root using a password of novell. 3. Check the previous and current runlevels by entering runlevel at the shell prompt. List the runlevels in the table below: Novell Training Services (en) 15 April 2009 Table 2-1 Previous Current Notice that the previous runlevel is listed as N, which means that there was no previous runlevel set. 4. Change to runlevel 3 by entering init 3 in the terminal window. 37

38 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 2-5 The graphical environment is terminated and you are left at a terminal login prompt: 5. Log in as root with a password of novell. 6. Check the previous and current runlevel by entering runlevel. List the runlevels in the table below: Table 2-2 Previous Current 7. Switch to runlevel 5 by entering init 5. The GUI login screen appears. 8. Log in as geeko with a password of novell. Part II: Activate the atd Service To activate the atd service, do the following: 1. Open a terminal window. 2. At the shell prompt, su - to root with a password of novell. 38

39 Figure 2-6 Manage System Initialization 3. View the current runlevel configuration for atd by entering chkconfig atd -l at the shell prompt. Notice that configuration is off for all runlevels. 4. Install the service to its predefined runlevels by entering insserv -d atd 5. Check the modified runlevel configuration for atd by entering chkconfig atd -l again. Notice that the default configuration for atd sets runlevels 2, 3, and 5 to on: Novell Training Services (en) 15 April 2009 Figure Change to the /etc/rc.d/rc3.d directory by entering cd /etc/rc.d/rc3.d at the shell prompt. 7. List the atd files in the directory by entering ls -l *atd at the shell prompt. Notice that there are two atd links one is used to start the atd service and one is used to kill it: 8. Start the at service by entering rcatd start at the shell prompt. 9. Verify that the service is running by entering rcatd status at the shell prompt. 10. Switch to virtual terminal 1 by pressing Ctrl+Alt+F Press Ctrl+c to bring up the shell prompt. 39

40 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 12. You should be still be logged in as root. Verify this by entering whoami at the shell prompt. 13. Switch to runlevel 1 by entering init 1 at the shell prompt. 14. When prompted, enter a root password of novell. 15. Determine if the atd service is running by entering rcatd status at the shell prompt. The service is listed as unused because it is not configured to start at runlevel Switch back to your previous runlevel (5) by entering init 5 at the shell prompt. The GUI login screen appears. 17. Log in as geeko with a password of novell. 18. Open a terminal session and enter su - to switch to root using a password of novell. 19. From the command line, remove the atd service from system startup runlevels by entering chkconfig atd off. 20. View the current runlevel configuration for at by entering chkconfig atd -l at the shell prompt. Notice that the service is off for all runlevels. 21. Re-enable the service to start at the default runlevels by entering chkconfig atd on at the shell prompt. Part III: Set a Runlevel at Boot Time To set a runlevel at boot time, do the following: 1. Reboot by entering init 6 at the shell prompt. 2. When the GRUB boot menu is displayed, press Space to stop the timer. 40

41 Figure 2-8 Manage System Initialization 3. In the Boot Options field, add the number 3 at the end of the line, as shown below: Novell Training Services (en) 15 April Press Enter to boot the Linux system to runlevel When the login prompt appears, log in as root with a password of novell. 6. Display the current runlevel by entering runlevel at the shell prompt. 7. Switch to runlevel 5 by entering init 5 at the shell prompt. 8. Switch back to the virtual terminal by pressing Ctrl+Alt+F1. 9. Press Ctrl+C. 10. Log out as root by entering exit. 11. Switch back to the graphical user interface by pressing Ctrl+Alt+F Log in as geeko with a password of novell. Part IV: Enable rsyncd with YaST To enable rsyncd with YaST, do the following: 1. In the graphical desktop, select Computer > YaST. 2. Enter a password of novell. The YaST Control Center appears. 3. Select System > System Services (Runlevel). 41

42 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook The Runlevel Editor: Services dialog appears. 4. Switch to a more detailed view (with additional options) by selecting Expert Mode. 5. Scroll to and select rsyncd. 6. Below the list, configure this service to start at runlevels 3 and 5 by selecting 3 and From the Set/Reset drop-down list, select Enable the Service. 8. Start the rsyncd service by selecting Start Now from the Start/Stop/Refresh dropdown list. A status message appears indicating that the service started successfully. 9. Close the status message by selecting OK. 10. Stop the rsyncd service by selecting Stop Now from the Start/Stop/Refresh dropdown list. A status message appears indicating that the service stopped successfully. 11. Close the status message by selecting OK. 12. Save the changes by selecting OK > Yes. 13. Close the YaST Control Center. (End of Exercise) 42

43 SECTION 3 Administer Linux Processes and Services Administer Linux Processes and Services In this section of the workbook, you learn how to do the following: Manage Linux Processes on page 44 In this exercise, you start and stop processes and change their priorities. Novell Training Services (en) 15 April

44 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 3-1 Manage Linux Processes In this exercise, you practice starting and stopping processes and changing their priorities. In the first part of the exercise, you start and suspend gcalctool, move it to the background and foreground, and then stop it. In the second part, you start gcalctool and set the priority of the running program to a nice value of -5. Then you start xeyes with a nice value of 10. Complete the following: Part I: Move Processes to the Background on page 44 Part II: Modify Process Priorities on page 47 Part I: Move Processes to the Background To move processes to the background, do the following: 1. If your DA1 server is running, suspend it. 2. If your DA-SLED workstation is suspended, resume it. 3. If necessary, log in to your DA-SLED virtual workstation as geeko with a password of novell. 4. Open a terminal window and su - to root using a password of novell. 5. At the command line, display the processes that are currently owned by geeko by entering ps -lu geeko (with a lowercase L) 6. Display the processes that are currently owned by root by entering ps -lu root (with a lowercase L) 7. Start the GNOME Calculator program by entering gcalctool at the shell prompt. Notice that the terminal is not available to receive new commands because no command line is displayed. This is because the calculator program is running in the foreground. 8. Arrange the calculator window and the terminal window so that you can see them both; then select the terminal window to activate it. 9. Suspend the calculator program by pressing Ctl+z. 10. Try using the calculator tool to calculate several numbers. Because its process was suspended, the calculator does not respond. 11. View the job in the background by entering jobs You should see that the gcalctool job is stopped: 44

45 Figure 3-1 Figure 3-2 Administer Linux Processes and Services 12. View the gcalctool process running from the current terminal by entering ps -l (with a lower case L) The process shows a status of T, which indicates that it is being traced or stopped: Novell Training Services (en) 15 April 2009 Figure Resume the calculator program running in the background by entering bg 1 Notice that the calculator program is running again. Because it s running in the background, you can now use the terminal window to enter other commands. 14. Verify that the job status is running by entering jobs You should see that the gcalctool job is now running: Figure View the gcalctool branch in the process tree by entering pstree -p grep gcalctool Notice that the gcalctool process is listed at the end of the tree: 16. Bring the xosview process into the foreground by entering fg Close the calculator program. 18. Start the calculator in the background by entering 45

46 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook nohup gcalctool& NOTE: The nohup command runs a command such that is ignores any hangup kill signals sent to it. 19. Close the terminal window. The calculator program remains running. 20. Open a new terminal window. 21. Start the top program by entering top 22. View only the processes started by root by typing u; then entering root. 23. Check for the calculator program (gcalctool) listed in top. 24. (Conditional) If you cannot find the gcalctool program, try maximizing the terminal window. You can also activate the Calculator window and use it to calculate several numbers. This should cause the gcalctool process to be moved near the top of the output in top. You can also enter F in top and select PID as the sort column. If needed, you can also reverse the sort order by pressing R 25. Record the PID of the gcalctool process: 26. Exit top by typing q. 27. View information about the gcalctool process by entering ps PID_of_gcalctool_process 28. Switch to your root user account using the su - command and a password of novell. 29. Stop the calculator program and check the status by entering the following commands: kill PID_of_gcalctool_process ps aux grep gcalctool 30. Start the xeyes program in the background by entering xeyes& 31. Kill the xeyes program by entering killall xeyes 46

47 Administer Linux Processes and Services Part II: Modify Process Priorities To modify process priorities, do the following: 1. Switch back to your geeko user by entering exit at the shell prompt. 2. Start the gcalctool program in the background by entering gcalctool& 3. Record the PID for gcalctool (displayed in the terminal window): Novell Training Services (en) 15 April View the running process by entering ps lf Notice that the nice value (NI) is currently at Increase the priority of the process to a nice value of -5 by entering renice -5 -p PID_of_gcalctool_process Notice that a regular user cannot change the nice value to a value below 0, only Switch to root (su -) with a password of novell. 7. Try setting the nice value to -5 again by entering renice -5 -p PID_of_gcalctool_process 8. Check that the setting is effective by entering ps lf (lower case L) Notice that the process is not displayed, because ps lf only displays processes started by the current user. The calculator program was started by geeko (not root). 9. View all processes by entering ps alf The gcalctools process is now displayed. 10. Change the nice value for the gcalctools process to a higher priority by entering renice -10 -p PID_of_gcalctools_process 11. Verify that the gcalctools process nice value is set to -10 by entering ps alf (with a lower case L) 12. Exit the shell running as root by entering exit You should now be user geeko again. 13. Start the xeyes program in the background with the nice value of +10 by entering 47

48 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook nice xeyes& 14. Verify that the xeyes process nice value is set to +10 by entering ps lf (with a lower case L) 15. Kill the gcalctools and xeyes processes by entering the following commands: kill PID_of_gcalctools_process killall xeyes 16. Close your terminal window. (End of Exercise) 48

49 SECTION 4 Administer the Linux File System In this section of the workbook, you learn how to do the following: Configure Partitions on your Hard Drive on page 50 Administer the Linux File System In this exercise, you practice creating partitions and file systems with YaST and fdisk. You also use command line tools to create file systems. Manage File Systems from the Command Line on page 61 In this exercise, you practice managing file systems from the command line. Create Logical Volumes on page 66 In this exercise, you learn how to administer LVM with YaST. Set Up and Configure Disk Quotas on page 73 In this exercise, you learn how to administer quotas. Novell Training Services (en) 15 April

50 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 4-1 Configure Partitions on your Hard Drive In this exercise, you practice creating partitions and file systems using YaST and fdisk. You also use command line tools to create file systems. In the first part of this exercise, you use YaST to create the following partitions and file systems: An extended partition using the remaining disk space. One logical partition with a size of 500 MB, an ext3 file system, and a mount point of /apps. One logical partition with a size of 1 GB, a Reiser file system, and a mount point of /srv. In the second part of this exercise, you use fdisk to create the following partitions: One partition of the partition type Win95/FAT32 with a size of 500 MB. Two partitions with the partition type Linux and sizes of 1 GB and 2 GB. In the third part of this exercise, you create file systems on the partitions you created in the second part using the applicable options for mkfs: Create a FAT32 file system on /dev/sda7. Create an ext2 file system on /dev/sda8. Create a Reiser file system with a file system size of 625 MB on /dev/sda9. To do this, you need to complete the following tasks: Part I: Create Partitions and File Systems with YaST on page 50 Part II: Partition Manually with fdisk on page 56 Part III: Manage File Systems from the Command Line on page 58 Part I: Create Partitions and File Systems with YaST To create partitions and file systems with YaST, do the following: 1. If your DA-SLED virtual machine is currently running, suspend it. 2. If your DA1virtual machine is suspended, resume it. 3. If necessary, log into DA1 as geeko with a password of novell. 4. Open a terminal window and use the su - command to switch to your root account using a password of novell. 5. At the shell prompt, enter yast2 disk. A warning message appears. 6. Continue by clicking Yes. After a few moments, the Expert Partitioner dialog appears. 50

51 Figure 4-1 Administer the Linux File System 7. Create an extended partition with YaST by doing the following: a. From the System View, expand Hard Disks. b. Highlight sda, then click Add. c. For the New Partition Type, select Extended Partition; then click Next. The New Partition Size dialog is displayed: Novell Training Services (en) 15 April 2009 d. Make sure Maximum Size is selected; then click Finish. 51

52 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 4-2 You are returned to the Expert Partitioner dialog, with the extended partition listed as a new entry for your hard disk: 8. Create a new ext3 partition with YaST: a. Click Add. The New Partition Size dialog is displayed. b. Verify that Custom Size is selected. c. In the Size field, enter 500 MB; then click Next. NOTE: Be sure to use upper-case characters when entering MB or GB in the Expert Partitioner fields. 52

53 Figure 4-3 The Formatting Options dialog is displayed: Administer the Linux File System Novell Training Services (en) 15 April 2009 d. Set the file system type to Ext2. e. Under Mounting Options, select Mount Partition. f. For the Mount Point, enter /apps. g. Create the partition definition by clicking Finish. 53

54 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 4-4 You are returned to the Expert Partitioner dialog where the new partition is added to the list: The asterisk (*) after the mount point indicates the file system is not currently mounted. 9. Create a partition for the /srv directory: a. With the sda disk selected, click Add. b. With Custom Size selected, enter 1 GB in the Size field; then click Next. c. In the File System drop-down list, select Reiser. d. Under Mounting Options, select Mount Partition. e. For the Mount Point, enter /srv. f. Add the /srv partition by clicking Finish. 54

55 Figure 4-5 Administer the Linux File System You are returned to the Expert Partitioner dialog where the new partition is added to the list: Novell Training Services (en) 15 April 2009 Figure Add the new partitions to the hard drive by clicking Next. A dialog is displayed showing a summary of the changes. 11. Select Finish. This commits the changes to disk and closes the Expert Partitioner dialog. 12. Verify creation of the new partition for /apps. In the terminal window where you are logged in as root, verify that the new partitions have been mounted by entering mount. You should see the following lines: 13. The contents of the /srv directory are no longer visible as it is currently used as the mount point for the /dev/sda6 partition. To copy the exists contents of the directory to the new partition, do the following: a. Unmount /dev/sda6 by entering umount /srv b. Mount the partition /dev/sda6 under /mnt by entering 55

56 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook mount /dev/sda6 /mnt c. Move the content of /srv to /mnt mv /srv/* /mnt d. Umount /mnt and mount /dev/sda6 again, using the entries in /etc/fstab umount /mnt mount -a e. Verify that the files you moved are available again under /srv by entering ls /srv/ 14. Verify that the appropriate entry was added to the /etc/fstab for the new partitions by entering: cat /etc/fstab You should see the following: Figure 4-7 These entries ensure that the new partitions are mounted when the system boots. Part II: Partition Manually with fdisk To partition manually from the command line with fdisk, do the following: 1. In the terminal window where you are logged in as root, start the utility fdisk on the first hard disk on your server by entering fdisk /dev/sda A message is displayed indicating that the number of cylinders is above 1024, which might cause problems under certain circumstances. 2. View the current partition table in fdisk by entering p. Notice that there are five partitions defined on sda: Figure Create a new 500MB Win95 FAT32 logical partition in the extended partition you created earlier by doing the following: a. Create a new partition by entering n. 56

57 Administer the Linux File System b. Enter l (lower case L) for logical. c. Accept the default first cylinder by pressing Enter. d. Indicate the partition size by entering +500M. e. Change the partition type to Win95 FAT32 by entering t (for type). f. Enter 7 to select the partition you just created. g. When prompted for a Hex code, enter b for Win95/FAT32. h. Verify the new partition configuration by entering p. Notice that the sda7 partition has been added to the table: Novell Training Services (en) 15 April 2009 Figure Create 2 more logical partitions with a partition type of Linux (the default) by doing the following: a. Create a new partition by entering n. b. Enter l (lower case L) to create a logical partition. c. Accept the default first cylinder by pressing Enter. d. Specify a partition size of 1 GB by entering +1G. e. Create another new partition by entering n. f. Enter l (lower case L) to create a logical partition. g. Accept the default first cylinder by pressing Enter. h. Indicate the partition size by entering +2G. i. Verify the new partition configuration by entering p. Notice that two new partitions (sda8 and sda9) have been added to the partition table: Figure Write the new partition table to your hard drive and exit fdisk by entering w. 57

58 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 6. View the current partition table used by the kernel by entering cat /proc/partitions Notice that the 3 new partitions you just created aren t listed. 7. To access the new partitions, you must update the kernel s partition table stored in memory. Do one of the following: Have the kernel update its partition table by entering partprobe. Reboot the system by entering reboot. 8. View the partition table again by entering cat /proc/partitions Part III: Manage File Systems from the Command Line To manage file systems from the command line, do the following: 1. In the terminal window where you are logged in as root, create the following file systems: a. Create a new FAT32 file system on /dev/sda7 and give it the label data1 by entering the following: mkfs.msdos -n data1 /dev/sda7 The following message should be displayed: mkfs.msdos 2.11 (12 Mar 2005) This confirms the file system was created. NOTE: Make sure you specify the correct device in the above command! If you specify the wrong device, no warning message will be displayed and the file system on the device will be overwritten. b. Create a new ext2 file system on /dev/sda8 with verbose output by entering the following: mkfs -t ext2 -v /dev/sda8 58

59 Figure 4-11 Administer the Linux File System Notice that by adding the option -v, extensive information about the new file system is displayed: Novell Training Services (en) 15 April 2009 c. Create a new Reiser file system on /dev/sda9 that is 625 MB in size by entering mkreiserfs /dev/sda A warning message appears indicating that all data will be lost on /dev/sda9. d. Continue by entering y. 2. Create the directories named data1, data2, and data3 under /export/ by entering mkdir -p /export/data{1,2,3} 3. Verify that the directories were created by entering ls -l /export 4. As root, add entries to the /etc/fstab file for the new file systems: a. Open the file /etc/fstab in the vi editor by entering vi /etc/fstab at the shell prompt. b. Press Ins. c. At the end of the file fstab, add the following new lines: /dev/sda7 /export/data1 vfat defaults 1 2 /dev/sda8 /export/data2 ext2 defaults 1 2 /dev/sda9 /export/data3 reiserfs defaults 1 2 NOTE: You must add an empty line after the last new entry at the end of the file, otherwise the mount command cannot read the file. These new entries ensure the sda7, sda8, and sda9 partitions are mounted when starting or rebooting the system. d. Save the changes to /etc/fstab by pressing Esc and then entering :wq. 59

60 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 5. In the terminal window, reread the /etc/fstab file and mount all of the new file systems by entering mount -a 6. View the information on the mounted file systems by entering the following two commands: mount cat /proc/mounts You should see entries for the three new partitions you just created, as shown in the following: Figure 4-12 (End of Exercise) 60

61 Exercise 4-2 Manage File Systems from the Command Line Administer the Linux File System In this exercise, you practice managing file systems from the command line. In the previous exercise, you created several partitions and file systems. In the first part of this exercise, you run e2fsck on the ext2 file system you created on /dev/sda5, which is mounted in /apps. In the second part of the exercise, you convert the /dev/sda8 partition to an ext3 file system by adding a journal. You also add a label to it. Finally, you resize the Reiser file system on /dev/sda9 to use the entire partition and not just 625 MB. Complete the following: Part I: Run e2fsck on page 61 Part II: Customize the File Systems on page 62 Part I: Run e2fsck To run e2fsck, do the following: 1. If if your DA1 virtual machine is suspended, resume it. 2. If necessary, log into DA1 as geeko with a password of novell. 3. Open a terminal session and switch to your root user account by entering su - followed by a password of novell at the shell prompt. 4. Unmount the file system on /dev/sda5 by entering umount /apps 5. Verify that the file system is no longer mounted by entering mount The /dev/sda5 partition should not be listed in the output of the mount command. 6. Start a file system check on sda5 running in verbose mode with an automatic response of yes to all prompts by entering e2fsck -f -y -v /dev/sda5 7. Mount the /apps file system again by entering mount /apps 8. Verify that the file system on /dev/sda5is mounted by entering mount Novell Training Services (en) 15 April

62 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Part II: Customize the File Systems In this part of the exercise, you add a journal to an ext2 file system, effectively making it an ext3 file system. Complete the following: 1. Modify the /dev/sda8 partition: a. In the terminal window, umount the /dev/sda8 partition and view details about the ext2 file system on it by entering umount /dev/sda8 ; dumpe2fs /dev/sda8 more Notice the block size and the file system state. b. Give the ext2 file system a volume name of /export/data2 while the file system is unmounted by entering tune2fs -L /export/data2 /dev/sda8 NOTE: It is common practice to use this naming convention. Naming a file system after its mount point can be useful in system rescue situations when the /etc/fstab file is not available. c. Verify that the file system now has a volume name by entering dumpe2fs /dev/sda8 less You should see that the volume name has been set to the partition s mount point, as shown below: Figure 4-13 d. Add a journal to the file system (making it an ext3 file system) by entering tune2fs -j /dev/sda8 e. Verify that the file system now contains a journal by entering dumpe2fs /dev/sda8 less You should see the following: Figure

63 Administer the Linux File System f. Mount /dev/sda8 again by entering mount /dev/sda8 g. View information on the mounted file systems by entering mount Notice that the file system is still mounted as an ext2 file system. h. Unmount the partition /dev/sda8 again by entering umount /dev/sda8 i. Verify that the file system state is clean by entering dumpe2fs /dev/sda8 less j. Edit the /etc/fstab file to change the file system type from ext2 to ext3 by entering vi /etc/fstab at the shell prompt. k. Press Ins. l. Locate the entry for /dev/sda8 and change the file system type from ext2 to ext3, as in the following: Novell Training Services (en) 15 April 2009 Figure 4-15 m. Press Esc, then enter :exit to save the changes to the file and exit the vi editor. n. At the command line, reread /etc/fstab and mount the partition as an ext3 file system by entering mount -a o. Verify the change by entering mount 63

64 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 4-16 You should see that /dev/sda8 has been mounted as an ext3 file system, as shown below: p. Unmount the partition /dev/sda8 again by entering umount /export/data2 q. Mount the partition as an ext2 file system manually by entering mount -t ext2 /dev/sda8 /export/data2 r. Verify that the file system is mounted without a journal (as an ext2 file system) by entering mount As you can see, ext3 is backward compatible with ext2: Figure 4-17 s. Remount /dev/sda8 as an ext3 file system and verify the change by entering the following commands: umount /export/data2 mount -a mount 2. Modify the /dev/sda9 partition by doing the following: a. View the size of the /dev/sda9 partition by entering df -h Note the size of /dev/sda9, which should be similar to that shown in the following: Figure

65 Administer the Linux File System b. Unmount dev/sda9 by entering umount /export/data3 c. While the partition is unmounted, add a label of /export/ data3 to the file system by entering reiserfstune -l /export/data3 /dev/sda9 d. Resize the partition to consume the entire partition by entering resize_reiserfs /dev/sda9 NOTE: When no size is specified, the file system is resized to use all available space on the partition. Increasing the size of the ReiserFS is also possible when the file system is mounted. Novell Training Services (en) 15 April 2009 e. Remount the partition by entering mount -a f. View the size of the partition by entering df -h The size is no longer 625 MB but is 2 GB or more, depending upon the size of your extended partition. g. Unmount the partition so you can run a file system check on it by entering umount /export/data3 h. Run a check on the file system on /dev/sda9 by entering reiserfsck -y /dev/sda9 i. Remount all file systems by entering mount -a (End of Exercise) 65

66 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 4-3 Create Logical Volumes In this exercise, you learn how to administer LVM with YaST. In the first part of this exercise, you use YaST to create two physical volumes (PVs) with a size of 1 GB each. You then add them to a volume group (VG) named projects. Within the volume group, you next add two logical volumes named pilot (750 MB) and production (750 MB) which will be mounted under /projects/pilot and /projects/ production, respectively. In the second part of the exercise, you increase the size of the logical volume production to the maximum space available within the volume group. Complete the following: Part I: Create LVM Physical Volumes, a Volume Group, and Logical Volumes on page 66 Part II: Resize an LVM Volume on page 70 Part I: Create LVM Physical Volumes, a Volume Group, and Logical Volumes To create LVM Physical Volumes, a Volume Group, and Logical Volumes, do the following: 1. If your DA1 virtual machine is suspended, resume it. 2. If necessary, log into DA1 as geeko with a password of novell. 3. Start YaST by selecting Computer > YaST and entering a password of novell, when prompted. 4. Select System > Partitioner and acknowledge the warning message by selecting Yes. The Expert Partitioner dialog appears. 5. Create a new LVM partition by doing the following: a. From the System View, expand Hard Disks. b. Highlight sda; then click Add. 66

67 Figure 4-19 Administer the Linux File System c. Verify Custom Size is selected; then enter 1 GB in the Size field, as shown below: Novell Training Services (en) 15 April 2009 d. Click Next. e. Under Formatting Options, select Do not format partition. f. Under File System ID, select 0x8E Linux LVM. g. Save the partition definition by selecting Finish. 6. Create another 1 GB LVM partition by repeating the preceding step. 67

68 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 4-20 You should now have two 1 GB LVM partitions: 7. From the System View, select Volume Management; then click Add Volume Group. 8. Specify the following: Volume Group Name: projects Physical Extent Size: 4 MB 9. Add each Linux LVM physical volume to the volume group projects by Ctrlclicking /dev/sda10 and /dev/sda11 and then clicking Add. 10. Click Finish. 68

69 Figure 4-21 Administer the Linux File System The Volume Management dialog appears displaying the newly added volume group: Novell Training Services (en) 15 April Add a logical volume named pilot to the projects volume group by doing the following: a. From the System View, select projects; then click Add. The Add Logical Volume dialog appears. b. Enter a Logical Volume name of pilot; then click Next. c. Select Manual Size and enter 750 MB in the Size field; then click Next. d. In the File System drop-down list, select Reiser. e. Select Mount Partition; then enter a mount point of /projects/pilot. f. Select Finish. 12. Add a logical volume named production to the projects volume group by doing the following: a. From the System View, select projects; then click Add. b. Enter a Logical Volume name of production; then click Next. c. Select Manual Size and enter 750 MB in the Size field; then click Next. d. In the File System drop-down list, select Reiser. e. Select Mount Partition; then enter a mount point of /projects/production. f. Select Finish. 69

70 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook You are returned to the Expert Partitioner. 13. In the Expert Partitioner, click Next. A message appears; accept the changes by clicking Finish. 14. Open a terminal window and use the su - command and a password of novell to switch to root. 15. View the new LVM file systems by entering df -h You should see output similar to the following: Figure View the device names and mount locations by entering cat /etc/fstab You should see the following: Figure 4-23 Part II: Resize an LVM Volume To resize a LVM Volume, do the following: 1. In the terminal window where you are logged in as root, enter umount /projects/ production. 70

71 Figure 4-24 Administer the Linux File System 2. From the YaST Control Center, select System > Partitioner and acknowledge the warning message by selecting Yes. The Expert Partitioner dialog appears. 3. From the System View, expand Volume Management. 4. Expand projects and select production; then click Resize. The Resize Logical Volume dialog appears, as shown below: Novell Training Services (en) 15 April 2009 Note the size of the volume. 5. Use the slider to select the maximum size available. Notice that the size changes to the maximum space available. 6. Continue by clicking OK. 7. Save the changes by clicking Next; then apply the changes by clicking Finish. 8. From the terminal window, view the new size of production by entering df -h 71

72 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 4-25 You should see output similar to the following: (End of Exercise) 72

73 Exercise 4-4 Set Up and Configure Disk Quotas Administer the Linux File System In this exercise, you learn how to administer quotas. You install the quota package and then configure quotas for /dev/sda8, which is mounted at /export/data2. Complete the following: 1. If your DA1 virtual machine is suspended, resume it. 2. If necessary, log into DA1 as geeko with a password of novell. 3. Open a terminal window; then switch to root using the su -command and a password of novell. 4. Install the quota package by entering yast -i quota. 5. (Conditional) Insert the SLES 11 installation DVD, if prompted. 6. View the disk quota configuration for user geeko by entering quota -vu geeko The lack of any output indicates there are no quotas currently configured for geeko. 7. Add quota mount options to the /dev/sda8 partition by doing the following: a. Open the /etc/fstab file in the vi editor by entering vi /etc/fstab b. Press Ins and arrow down to the /dev/sda8 entry. c. Edit the /dev/sda8 entry to the following: /dev/sda8 /export/data2 ext3 defaults,usrquota,grpquota 1 2 d. When you finish, press Esc; then save the file and exit by entering :wq. 8. Remount the file system so it that the changes in the /etc/fstab file are read by the system by entering mount -o remount /dev/sda8 Novell Training Services (en) 15 April 2009 NOTE: If you receive the error message /export/data2 mounted already, or bad option, check the contents of the /etc/fstab file. You might have misspelled the usrquota or grpquota option. 9. Run quotacheck to initialize the quota database by entering quotacheck -mavug NOTE: You will receive several status messages about old quota files. These indicate that this is a new quota database with no previous quota database files on the system. 10. Verify that the aquota.user and aquota.groups files exist in the /export/data2 directory by entering ls -l /export/data2 73

74 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 11. Turn quotas on for all file systems that are mounted with these options by entering quotaon -av 12. Make the quota system persistent after reboot by entering insserv boot.quota 13. Set a quota for geeko with a soft block limit of about 20 MB and a hard block limit of about 30 MB on /dev/sda8 by entering edquota -u geeko The quota editor appears in the vi editor. 14. Press Ins. 15. Under soft, remove the 0 and enter Under hard, remove the 0 and enter When you re finished, press Esc; then enter :wq. 18. View the quota information about all configured users by entering repquota -av You should see the following: Figure (Optional) If you finish early, set a quota for the users group of 100 MB for the soft limit and 150 MB for the hard limit. 20. Test if the quotas by doing the following: a. As root, create a directory named /export/data2/geeko and change the owner to geeko by doing the following: mkdir /export/data2/geeko chown geeko.users /export/data2/geeko b. Change to the user account geeko and create a file by entering su - geeko dd if=/dev/zero of=/export/data2/geeko/bigfile 74

75 Figure 4-27 Administer the Linux File System After a short time, you should see a message indicating the quota was exceeded, as shown below: 21. Close all open windows. (End of Exercise) Novell Training Services (en) 15 April

76 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 76

77 SECTION 5 Configure the Network Manually In this section of the workbook, you learn how to do the following: Configure the Network Connection Manually on page 78 In this exercise, you learn how to configure the network manually. Configure the Network Manually Novell Training Services (en) 15 April

78 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 5-1 Configure the Network Connection Manually The purpose of this exercise is to familiarize you with manually configuring network settings. In the first part, you use the ip command to find out the current settings for IP address, routes, mac address. In the second part, you use YaST to delete the current network configuration. In the third part, you use the ip command to set up the network manually. In the fourth part, you recreate the file noted in Part I using an editor. Complete the following: Part I: Note the Current Network Configuration on page 78 Part II: Delete the Current Network Setup with YaST on page 78 Part III: Configure the Network Manually on page 79 Part IV: Save the Network Connection to an Interface Configuration File on page 79 Part I: Note the Current Network Configuration To note the current network configuration, do the following: 1. If necessary, power on your DA1 virtual server and log in as geeko with a password of novell. 2. Open a terminal window and su - to root using a password of novell. 3. Enter ip address show eth0. 4. Under eth0, find the line starting with inet and record the IP address with the subnet mask displayed in that line: IP address: Subnet mask: 5. Enter ip route show. Notice that a default gateway has not been assigned. 6. Enter ip link show eth0. 7. Find the line starting with link/ether and record the MAC address of the network card: MAC address: Part II: Delete the Current Network Setup with YaST To delete the current network setup with YaST, do the following: 1. Start YaST; then select Network Devices > Network Settings. 2. Select your network card; then click Delete. 3. Click OK. 78

79 4. Close YaST. Configure the Network Manually 5. Verify that the network connection is not working any more by pinging your host system s vmnet1 virtual network interface. Enter the following at the shell prompt: ping You should see a message indicating that the network is unreachable. 6. Enter ip address show at the shell prompt. Note that the state of your eth0 device is DOWN. Part III: Configure the Network Manually To configure the network manually, do the following: 1. Enter the following command at the shell prompt: ip address add /16 brd + dev eth0 2. To activate the network device, enter ip link set eth0 up 3. To set the default route, enter ip route add default via Verify that the network connection is working again by entering ping You should see your host system respond to the ping, as shown below: Novell Training Services (en) 15 April 2009 Figure 5-1 Part IV: Save the Network Connection to an Interface Configuration File To save the network connection to an interface configuration file, do the following: 1. In the terminal window, enter cd /etc/sysconfig/network 2. Make a copy of the network configuration template by entering cp ifcfg.template ifcfg-eth0 3. Open the copied file in a text editor by entering vi ifcfg-eth0 at the shell prompt. 4. Press Ins. 79

80 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 5. Find the following options and enter the indicated values: STARTMODE='auto' BOOTPROTO='static' IPADDR=' /16' NETMASK= BROADCAST= Change BRIDGE= yes to BRIDGE= no 6. Press Esc; then save the file and exit vi by entering :wq. 7. Create a new file with vi called routes by entering vi routes at the shell prompt. 8. Press Ins; then add the following line to the file: default Press Esc; then save the file and exit vi by entering :wq. 10. Reboot your system by entering init 6 at the shell prompt. Wait while the system reboots. 11. After rebooting, log in as geeko with a password of novell. 12. Open a terminal window. 13. Change to root using the su - command and a password of novell. 14. Verify that the network configuration loaded correctly by entering the following commands: ip address show eth0 ip route show You should see the following: Figure Verify that the network connection is working properly by entering ping Close all open windows. 80

81 Configure the Network Manually NOTE: If the network configuration doesn t work properly, use the YaST Network Card module to reconfigure the network card with the proper settings. (End of Exercise) Novell Training Services (en) 15 April

82 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 82

83 SECTION 6 Manage Hardware In this section of the workbook, you can find the following exercises: Manage Linux Kernel Modules on page 84 In this exercise, you load and unload kernel modules. Obtain Hardware Configuration Information in YaST on page 86 Manage Hardware In this exercise, you learn how to obtain hardware configuration information on your computer. Modify udev Rules on page 88 In this exercise, you will modify a udev rule to rename your Ethernet interface. Novell Training Services (en) 15 April

84 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 6-1 Manage Linux Kernel Modules In this exercise, load and unload kernel modules. Complete the following: 1. If necessary, power on your DA1 virtual server and log in as geeko with a password of novell. 2. Open a terminal window, then switch to the root user by entering su - followed by a password of novell. 3. View the currently loaded kernel modules by entering lsmod at the shell prompt. 4. Scroll through the modules to see if the joystick module (joydev) is loaded. If it s difficult to locate in the output, you can enter lsmod grep joydev at the shell prompt. You should see output similar to the following: Figure 6-1 The 0 in the Used column indicates that the module is not in use. NOTE: If the joydev module is not listed, skip to step Step 7 on page Remove the joystick module from the kernel memory by entering rmmod joydev 6. Verify that the joydev kernel module was removed from memory by entering lsmod grep joydev at the shell prompt. Notice that the module joydev is no longer listed. 84

85 7. Load the joystick kernel module by entering modprobe joydev Manage Hardware 8. Verify that the joydev kernel module is loaded in memory by entering lsmod grep joydev at the shell prompt. 9. View the kernel modules configuration by entering modprobe -c less at the shell prompt. 10. Scroll through the module configuration information by pressing Space. 11. When you have finished, return to the command line by typing q. 12. Create a list of kernel modules dependencies by entering depmod -v less Wait a few minutes for the information to be generated. 13. Scroll through the dependency information by pressing Space. 14. When you have finished, return to the command line by typing q. 15. Close the terminal window by entering exit twice. Novell Training Services (en) 15 April 2009 (End of Exercise) 85

86 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 6-2 Obtain Hardware Configuration Information in YaST In this exercise, you obtain hardware configuration information about your computer. Complete the following: 1. If necessary, power on your DA1 virtual server and log in as geeko with a password of novell. 2. Select Computer > YaST. 3. When prompted, enter a root password of novell. 4. Select Hardware > Hardware Information. Wait while the YaST module scans your hardware. This may take several minutes. When complete, you should see output similar to the following: Figure Review the results of the hardware detection. 6. Save the results to a file by doing the following: a. Click Save to File. b. Browse to the root user s home directory (/root). c. In the File Name field, enter hardware.txt. d. Click Save. e. Wait while the file is saved. This make take several minutes to complete. 7. Close the Hardware info window by clicking Close. 86

87 Figure Close the YaST Control Center. Manage Hardware 9. View the information saved in the hardware.txt file by doing the following: a. Open a terminal window. b. Switch to your root user account by entering su - at the shell prompt, followed by a password of novell. c. At the shell prompt, enter less./hardware.txt. You should see text similar to the following: Novell Training Services (en) 15 April 2009 d. Use the Spacebar to browse through the results. e. When finished, press q to exit. 10. Close all open windows. (End of Exercise) 87

88 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 6-3 Modify udev Rules In this exercise, you modify a udev rule that renames your eth0 interface to eth1. Complete the following: 1. If necessary, power on your DA1 virtual server and log in as geeko with a password of novell. 2. Open a terminal window and switch to the root user account by entering su - followed by a password of novell. 3. At the shell prompt, enter cd /etc/udev/rules.d. 4. Open the 70-persistent-net.rules file in the vi editor by entering vi./70-persistent-net.rules at the shell prompt. 5. Press Ins. 6. Locate and scroll down to the line that sets the name of your network interface to eth0. 7. Change the NAME= eth0 parameter to NAME=eth1. 8. Press Esc. 9. Save your changes and exit the editor by entering :exit at the shell prompt. 10. Reboot your DA1 virtual server by entering init 6 at the shell prompt. 11. Wait for your default GRUB menu item to be selected to start the boot process. 12. When the system starts to boot, press Esc so you can view your system s boot messages. 88

89 Figure 6-4 Manage Hardware You should see a message indicating eth0 is being renamed to eth1 by udev, as shown below: Novell Training Services (en) 15 April

90 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 6-5 You should also see a message indicating the eth1 interface has not been configured, as shown below: This happens because there is no configuration for eth1 in /etc/sysconfig. 13. When the system has rebooted, log in as geeko with a password of novell. 14. Open a terminal session and switch to root with the su - command and a password of novell. 15. At the shell prompt, enter cd /etc/udev/rules.d. 16. Open the 70-persistent-net.rules file in the vi editor by entering vi./70-persistent-net.rules at the shell prompt. 17. Press Ins. 18. Change the NAME= eth1 parameter back to NAME=eth Press Esc. 20. Save your changes and exit the editor by entering :exit at the shell prompt. 21. Reboot your DA1 virtual server by entering init 6 at the shell prompt. 22. Wait for your default GRUB menu item to be selected to start the boot process. 90

91 Figure 6-6 Manage Hardware 23. When the system starts to boot, press Esc so you can view your system s boot messages. 24. Verify that your network interface is now named eth0 and that the appropriate network configuration parameters are applied, as shown below: Novell Training Services (en) 15 April 2009 (End of Exercise) 91

92 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 92

93 SECTION 7 Configure Remote Access Configure Remote Access In this section of the workbook, you learn how to do the following: Practice Using OpenSSH on page 94 In this exercise, you learn how to use OpenSSH. Perform Public Key Authentication on page 98 In this exercise, you practice using SSH with public key authentication. Use Remote Administration on page 102 In this exercise, you configure remote administration. Use Nomad on page 107 In this exercise, you configure remote desktop using Nomad. Novell Training Services (en) 15 April

94 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 7-1 Practice Using OpenSSH In this exercise, you practice using the SSH suite of utilities. You perform the following tasks: Log in remotely to your DA1 server as root. Remotely execute the ps aux command on DA1 without logging in to the server. Copy the /etc/hosts file from DA1 to your /tmp directory. Copy the /etc/hosts file from your workstation to the home directory of geeko on DA1. Using sftp, copy the /bin/date file from DA1 to /home/geeko on your workstation. Do the following: 1. If necessary, power on both your DA1 and your DA-SLED virtual machines. 2. Log in to DA1 from DA-SLED by doing the following: a. If necessary, log in to your DA-SLED workstation as geeko with a password of novell. b. Right-click the desktop; then select Open in Terminal. c. At the command line, enter ssh -l geeko da1.digitalairlines.com The following is displayed: Figure 7-1 d. When prompted to continue, enter yes. e. When prompted, enter a password of novell. You are now logged in to the DA1 server as geeko. f. Log out by entering exit. 3. Check the processes running on the DA1 server by entering the following at the shell prompt of your workstation: ssh -l geeko da1.digitalairlines.com ps aux 4. When prompted, enter a password of novell. 94

95 Figure 7-2 A list of all processes currently running on DA1 is displayed: Configure Remote Access Novell Training Services (en) 15 April 2009 Figure Copy the /etc/hosts file on your DA1 server to the /tmp directory on your workstation by entering the following at the workstation shell prompt: scp geeko@da1.digitalairlines.com:/etc/hosts /tmp/ 6. When prompted, enter a password of novell. 7. At the shell prompt, enter ls /tmp. You should see the hosts file from the DA1 server in your /tmp directory, as shown below: 8. Copy the /etc/hosts file on your workstation to geeko s home directory on your DA1 server by entering the following: scp /etc/hosts geeko@da1.digitalairlines.com: 95

96 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure When prompted, enter a password of novell. 10. Verify that the file was copied by doing the following: a. Switch to your DA1 server. b. If necessary, log in as geeko with a password of novell. c. Double-click the geeko s Home icon on the desktop. You should see the hosts file from the workstation in the geeko user s home directory: d. Switch back to your workstation. 11. Use sftp to connect to your DA1 server as geeko by entering: sftp geeko@da1.digitalairlines.com 12. When prompted, enter a password of novell. 13. Copy the /bin/date program from the DA1 server to geeko s home directory on your workstation by entering: get /bin/date /home/geeko/ You should see output similar to the following: Figure Quit sftp by entering exit. 96

97 Figure At the shell prompt, enter ls /home/geeko. Configure Remote Access Verify that the date program has been copied to the geeko user s home directory: Novell Training Services (en) 15 April Close all open windows on both virtual machines. (End of Exercise) 97

98 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 7-2 Perform Public Key Authentication In this exercise, you practice using SSH with public key authentication. First, you create an ssh-key pair. Then you add the public key to the ~geeko/.ssh/ authorized_keys file on your DA1 server and note the difference between logging in with and without a public key. You then use ssh-agent to cache the private key and log in again to your DA1 server as geeko. Finally, you change the server configuration to allow only public key authentication. Complete the following: 1. If necessary, power on your DA1 and DA-SLED virtual machines. 2. If necessary, log in to your DA-SLED workstation as geeko with a password of novell. 3. On your workstation, open a terminal window. 4. Generate an RSA key pair by doing the following: a. At the terminal window, enter ssh-keygen -t rsa. b. Accept the default location for the key (/home/geeko/.ssh/id_rsa) by pressing Enter. c. When prompted, enter a passphrase of novell. Information about your key pair, such as the location of your identification and the public key, is displayed: Figure

99 Configure Remote Access 5. Add the RSA public key to the geeko user s ~/.ssh/authorized_keys file on DA1 by doing the following: a. Copy the file to the home directory of geeko on the DA1 server by entering the following: scp ~/.ssh/id_rsa.pub geeko@da1.digitalairlines.com: b. When prompted, enter a password of novell. c. Using ssh, log in as geeko to your DA1 server by entering ssh -l geeko da1.digitalairlines.com d. When prompted, enter a password of novell. e. Enter ls -al. f. If an.ssh directory does not exist, then create it by entering mkdir.ssh g. Copy the public key to the ~/.ssh/authorized_keys file by entering cat id_rsa.pub >>.ssh/authorized_keys 6. Log out from the DA1 server by entering exit. 7. Using ssh, log in to your DA1 server as geeko by entering ssh -l geeko da1.digitalairlines.com You are prompted for a password to unlock the private key: Novell Training Services (en) 15 April 2009 Figure Log in by entering novell; then log out by entering exit. 99

100 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 9. To track authentication, start the ssh-agent by entering ssh-agent bash. 10. Add your private key to the agent for authentication by entering ssh-add ~/.ssh/id_rsa 11. When prompted, enter a passphrase of novell. 12. Using ssh, log in as geeko to your DA1 server by entering ssh -l geeko da1.digitalairlines.com This time you are not prompted for a password or passphrase. 13. Switch to user root by entering su - followed by a password of novell. 14. At the shell prompt, enter vi /etc/ssh/sshd_config. 15. Do the following: a. Enter /PasswordAuthentication to locate the PasswordAuthentication line. b. Make sure it is set to no. c. Enter /UsePAM to locate the UsePAM line. d. Press Ins. e. Change the value of UsePam from yes to no. f. Press Esc. g. Enter :exit to save the file and close the editor. 16. Restart sshd by entering rcsshd restart. 17. Enter ssh geeko@localhost. 100

101 Figure When prompted to continue connecting, enter yes. You should see an error message and no prompt for a password: Configure Remote Access Novell Training Services (en) 15 April Using the vi editor, undo the changes made in Step 15 on page 100; then restart sshd. 20. Log out as root by entering exit. 21. Log out from DA1 by entering exit. 22. Close all open windows. (End of Exercise) 101

102 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 7-3 Use Remote Administration In this exercise, you configure remote administration. This exercise has four parts. In the first part, you remotely access the text-based version of YaST on DA1 from your workstation. Then in the second part, you remotely access the graphical version of YaST on DA1 from your workstation. In the third part, you configure remote access to your DA1 server with the YaST Remote Administration module. In the fourth part, you access your server via VNC. You need to complete the following tasks: Part I: Remotely Access a Text-Based Version of YaST on page 102 Part II: Remotely Access the GUI Version of YaST on page 103 Part III: Configure Remote Administration with YaST on page 104 Part IV: Access Your DA1 Server Remotely on page 105 Part I: Remotely Access a Text-Based Version of YaST Do the following: 1. If necessary, power on your DA1 and DA-SLED virtual machines. 2. If necessary, log in to your DA-SLED workstation as geeko with a password of novell. 3. Open a terminal window and enter: ssh root@da1.digitalairlines.com 4. When prompted for the password, enter novell. 5. Launch the ncurses-based version of YaST by entering yast2. 102

103 Figure 7-10 Configure Remote Access Despite the fact that you entered yast2, the text-based version of the YaST Control Center appears: Novell Training Services (en) 15 April 2009 This is because X11 forwarding is not active in the default configuration of ssh. 6. Exit the YaST Control Center by pressing Alt+q. 7. Close the SSH session by entering exit. Part II: Remotely Access the GUI Version of YaST Do the following: 1. From the terminal window on your workstation, enter ssh -X 2. When prompted for the password, enter novell. 3. Launch the GUI-based version of YaST by entering yast2. 103

104 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 7-11 Because the -X option activated X11 forwarding, the GUI-based version of the YaST Control Center appears: Part III: Configure Remote Administration with YaST Do the following: 1. Install a Java browser plug-in: a. Select Software > Software Management. b. In the search field, enter java-1; then click Search. c. From the search results, select java-1_6_0-ibm-plugin. d. Click Accept. e. Accept the automatic changes by clicking Continue. Wait while the packages are installed. 2. In the main window of YaST, select Network Devices > Remote Administration (VNC). 104

105 Figure 7-12 The Remote Administration dialog appears: Configure Remote Access Novell Training Services (en) 15 April Select Allow Remote Administration; then select Open Port in Firewall. 4. Click Finish. 5. Close YaST. 6. Restart the display manager by entering rcxdm restart at the shell prompt. 7. At the shell prompt, enter exit. Your SUSE Linux Enterprise Server 11 system is ready to be accessed remotely. Part IV: Access Your DA1 Server Remotely To access the DA1 server from a web browser, do the following: 1. On your DA-SLED workstation desktop, open the Firefox web browser by selecting Computer > Firefox. 2. In the Location field, enter 105

106 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 7-13 The following is displayed: 3. Log in to the remote server s desktop as geeko with a password of novell. The desktop for your geeko on DA1 appears. 4. If time permits, try completing various administrative tasks and running commonly-used applications on DA1 through the VNC session. 5. When you re finish testing the desktop, close the VNC session by clicking Disconnect (at the top of the screen). 6. Close all open windows. (End of Exercise) 106

107 Exercise 7-4 Figure 7-14 Use Nomad Configure Remote Access In this exercise, you configure Nomad on your DA-SLED workstation. You establish an RDP connection between your host workstation and the DA-SLED virtual workstation. Complete the following: 1. Verify that your DA-SLED workstation is running. 2. If necessary, log in to your DA-SLED workstation as geeko with a password of novell. 3. Install the Nomad packages on DA-SLED by doing the following: a. Start YaST by selecting Computer > YaST. b. When prompted, enter a root user password of novell. c. Select Network Devices > Remote Administration (RDP). d. When prompted that xrdp needs to be installed, click Install. e. (Conditional) If prompted, insert your SLED 11 installation DVD. f. Wait while the RDP packages are installed. When complete, the following is displayed: Novell Training Services (en) 15 April

108 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook g. Mark Allow Remote Administration and Open Port in Firewall. h. Click Finish. i. Close YaST. 4. Reboot DA-SLED by entering init 6 at the shell prompt. 5. After the system as rebooted, log in as geeko with a password of novell. 6. Open a terminal session and switch to root using the su- command followed by a password of novell. 7. Verify that xrdp is running by entering rcxrdp status at the shell prompt. The command should return a status of running. 8. Add da-sled.digitalairlines.com to the /etc/hosts file on your host workstation (not DA-SLED) by doing the following: a. On your host workstation, start YaST. b. In YaST, select Network Services > Hostnames. c. Click Add. d. Enter the following: IP Address: Hostname: da-sled.digitalairlines.com Host Aliases: da-sled e. Click OK. f. Click Finish. g. Exit YaST. 9. Verify that the rdesktop and tsclient packages were installed when your host workstation was deployed by doing the following: a. Open a terminal session on your host workstation. b. At the shell prompt, switch to root by entering su - followed by a password of novell. c. At the shell prompt, enter rpm -q rdesktop. d. At the shell prompt, enter rpm -q tsclient. You should see that both packages have already been installed: Figure

109 Figure 7-16 Configure Remote Access NOTE: If these packages were not automatically installed, use YaST to install them manually. 10. Configure a remote desktop connection on your host workstation by doing the following: a. At the shell prompt on your host workstation, enter tsclient. b. Click Add Connection > Windows Terminal Service. The following is displayed: Novell Training Services (en) 15 April 2009 c. In the Name field, enter DA-SLED Desktop. d. In the Host field, enter DA-SLED.digitalairlines.com. e. In the Username field, enter geeko. f. In the Password field, enter novell. g. Select Custom Window Size; then enter a screen geometry of 800 x 600. h. Expand Advanced Options. 109

110 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 7-17 i. In the Connection Type drop-down list, select LAN. j. Click OK. The DA-SLED Desktop remote desktop connection is added to the Terminal Server Client window, as shown below: 11. Open the remote connection by double-clicking DA-SLED Desktop. The DA-SLED desktop is displayed in an rdesktop window, as shown below: Figure

111 Configure Remote Access 12. (Conditional) If time permits, experiment with the remote desktop. Try opening and using the various applications remotely. 13. When complete, click Computer > Logout > Log Out within the remote desktop session. 14. In the Terminal Server Client window, click the Exit icon. 15. At the shell prompt, enter exit twice. (End of Exercise) Novell Training Services (en) 15 April

112 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 112

113 SECTION 8 Monitor SUSE Linux Enterprise 11 Monitor SUSE Linux Enterprise 11 In this section of the workbook, you learn how to do the following: Gather Information on your SLES 11 Server on page 114 In this exercise, you learn how to get information on the computer you are using. Manage System Logging on page 116 In this exercise, you practice configuring syslog-ng and logrotate. Novell Training Services (en) 15 April

114 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 8-1 Table 8-1 Gather Information on your SLES 11 Server In this exercise, you learn how to get information about your DA1 server. You use the administration tools covered in this section to gather the following information on your server. As you work through this exercise, write down the appropriate value in the right-hand column of the following table: System Parameter Value OS Hardware Architecture Processor Type Hostname Kernel Release Kernel Version (include date and time) System Up Time Load Averages SLES 11 Version System Date and Time Model Name of Processor Free Memory Patch Level Complete the following: 1. If necessary, power on your DA1 server and log in as geeko with a password of novell. 2. Open a terminal window and switch to root using the su - command and a password of novell. 3. View the kernel release of the Linux distribution you are running by entering uname -r 4. View the computer s hardware architecture by entering uname -m 5. View the processor type for this Linux build by entering uname -p 6. View all information, including hostname, kernel release, and kernel version, by entering 114

115 Monitor SUSE Linux Enterprise 11 uname -a 7. View the system uptime and the load averages by entering uptime 8. View the version of the SUSE Linux Enterprise Server distribution by entering cat /etc/suse-release 9. View the system date and time by entering date 10. View information on the processor by entering cat /proc/cpuinfo 11. View the current memory statistics by entering cat /proc/meminfo Novell Training Services (en) 15 April 2009 (End of Exercise) 115

116 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 8-2 Manage System Logging In this exercise, you practice configuring syslog-ng and logrotate. First, you configure syslog-ng to log messages of the local4 facility. The /var/log/ local4 file is used for messages of the local4 facility no matter the priority. The /var/ log/local4.debug file logs only messages with the debug priority. A third file, /var/ log/local4.info, logs only messages with the info priority. Then you configure logrotate to manage these log files. You create a /etc/logrotate.d/ local4 file that does the following with these three files: Compresses the old logs Saves the old logs with a date extension Limits the oldest log to one day Limits the rotated logs saved to five Limits the maximum size of the file to 20 bytes Proceeds without error if a log file is missing Logs the date in the local4.info file each time a new log file is generated NOTE: The above values (one day, five logs, 20 bytes) are used for demonstration purposes only. In a production environment, these values should be much higher. Complete the following tasks to do this: Part I: Modify the syslog-ng Configuration on page 116 Part II: Configure logrotate on page 118 Part I: Modify the syslog-ng Configuration To modify the syslog-ng configuration, do the following: 1. If necessary, power on your DA1 server and log in as geeko with a password of novell. 2. Open a terminal window and switch to root using the su - command and a password of novell. 3. At the shell prompt, enter vi /etc/syslog-ng/syslog-ng.conf.in. 4. Press Ins. 5. Add the following lines at the bottom of the file to create filters for the messages you want to log: filter f_local4debug { level(debug) and facility(local4); }; filter f_local4info { level(info) and facility(local4); }; filter f_local4 { facility(local4); }; 6. Specify the destinations and log paths by adding the following lines: 116

117 Monitor SUSE Linux Enterprise 11 destination local4debug { file("/var/log/local4.debug"); }; log { source(src); filter(f_local4debug); destination(local4debug); }; destination local4info { file("/var/log/local4.info"); }; log { source(src); filter(f_local4info); destination(local4info); }; destination local4 { file("/var/log/local4"); }; log { source(src); filter(f_local4); destination(local4); }; NOTE: Check your syntax carefully. If you make a mistake in this file, syslog won t start. Novell Training Services (en) 15 April Save the changes and close the editor by pressing Esc and then entering :exit. 8. Restart the syslog daemon by entering rcsyslog restart at the shell prompt. 9. Open a new terminal window and enter su - followed by a password of novell. 10. Check the configuration by logging an entry to the info level in the local4 facility by doing the following: a. Enter the following in one of your terminal sessions to monitor the activity of the log file: tail -f --retry /var/log/local4.info NOTE: You will see warnings regarding the --retry option and the fact that the file does not yet exist. You can disregard this error as the file will be created when you complete the next step. b. In the other terminal window, log an entry to the info level in the local4 facility by entering logger -p local4.info "Info message 1" c. Check the results in the second terminal window. The message is logged in the /var/log/local4.info file, as shown below: Figure 8-1 The message should also be logged in the /var/log/local4 file and, because of other entries in /etc/syslog-ng/syslog-ng.conf, in /var/log/localmessages. NOTE: If no messages appear, there might be something wrong with your syslog configuration, for instance a typo or a missing ;. To diagnose what is wrong, enter rcsyslog restart at the shell prompt and see if syslog starts properly. If there is an issue 117

118 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook with the configuration, an error message will say so. Look for the line number shown in the output for the error, correct it, and restart syslog. d. In the terminal window where the log activity is being monitored with tail, stop the monitoring by pressing Ctrl+c. 11. Repeat this process for the debug log level. Use the following command in the first terminal window: tail -f --retry /var/log/local4.debug Use the following command in the second terminal window: logger -p local4.debug Info message 2 NOTE: Only those level4 log files with entries will be compressed during log rotation in Part II of this exercise. 12. In the terminal window where the log activity is being monitored with tail, stop the monitoring by pressing Ctrl+c. Part II: Configure logrotate To configure logrotate, do the following: 1. At the shell prompt, enter vi /etc/logrotate.d/local4. 2. Press Ins. 3. Add the following content to the file: /var/log/local4.debug /var/log/local4.info /var/log/local4 { compress dateext maxage 1 rotate 5 size 20 postrotate date >> /var/log/local4.info endscript } NOTE: Make sure the directories in the first line are separated with spaces. 4. Press Esc; then save the changes and close the editor by entering :exit. 5. Switch to virtual terminal 1 by pressing Ctrl+Alt+F1. 6. Log in as root with a password of novell. 7. Rotate the logs manually by entering logrotate /etc/logrotate.conf 8. Check the directory /var/log for the zipped local4 log files by entering 118

119 Monitor SUSE Linux Enterprise 11 ls -l /var/log less You see the following files: local4.debug-current_date.bz2 local4.info-current_date.bz2 For example, if the current date is July 15, 2009, then the zipped file for local4.info will be local4.info bz2. The.bz2 extension is used because the command to compress files is set to bzip2 in /etc/logrotate.conf. Novell Training Services (en) 15 April 2009 NOTE: Only those log files with entries are zipped. 9. Exit the list by entering q. 10. Check the contents of the local4.info zipped archive by entering less /var/log/local4.info-current_date.bz2 You should see the entries you added to the log file, as shown in the following: Figure Press q to exit. 12. Log out as root by entering exit 13. Return to the GNOME desktop by pressing Ctrl+Alt+F Close all open windows. (End of Exercise) 119

120 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 120

121 SECTION 9 Administer Linux Processes and Services Administer Linux Processes and Services In this section of the workbook, you learn how to do the following Schedule Jobs with cron and at on page 122 Novell Training Services (en) 15 April

122 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 9-1 Schedule Jobs with cron and at In this exercise, you practice scheduling jobs with at and cron. In the first part of the exercise, you redirect the output of the finger command to /var/ log/messages three minutes from the current time. Then you schedule the same job for tomorrow at noon. Finally, you schedule a program to run tomorrow at 2 p.m. and afterwards remove the job. In the second part of the exercise, you create a cron job as a normal user that logs the output of finger to ~/users.log every minute and another cron job as root that backs up /etc/ to /export/data2/etc.tgz using tar and the options czvf every Tuesday at 2 a.m. Complete the following: Part I: Schedule Jobs with at on page 122 Part II: Schedule Jobs with cron on page 123 Part I: Schedule Jobs with at To schedule jobs with at, do the following: 1. If necessary, power on your DA1 server and log in as geeko with a password of novell. 2. Open a terminal window and switch to root using the su - command and a password of novell. 3. Check to see if the at service is running by entering rcatd status at the shell prompt. 4. If the command returns a status of unused, start the at service by entering rcatd start at the shell prompt. 5. Display the current date and time by entering date at the shell prompt. 6. Three minutes from now, log who is currently logged in to the /var/log/messages file by entering the following commands: at hh:mm finger >> /var/log/messages NOTE: Make sure you enter two > characters in the above command. If you have only one > character, all existing entries in /var/log/messages will be overwritten. 7. Exit the at editor by pressing Ctrl+d. 8. View the scheduled at jobs by entering atq (or at -l). Note the job number listed. 9. Wait for the three minutes to pass. 10. When the time has past, enter tail /var/log/messages at the shell prompt. 122

123 Figure 9-1 Administer Linux Processes and Services Login information for geeko is listed at the end of the file. An example is shown below: Novell Training Services (en) 15 April 2009 Figure Schedule the same job to run tomorrow at noon by entering the following commands: at noon tomorrow finger >> /var/log/messages 12. Exit the at editor by pressing Ctrl+d. 13. Schedule the date to be logged tomorrow at 2:00 p.m. to the /var/log/messages file by entering the following: at 14:00 tomorrow date >> /var/log/messages 14. Exit the at editor by pressing Ctrl+d. 15. View the scheduled at jobs by entering atq (or at -l). Notice that the two jobs are listed, each with an individual job number: 16. Remove the job scheduled for tomorrow at 2:00 p.m. by entering atrm job_number 17. View the scheduled at jobs by entering atq (or at -l). Only the job scheduled for 12:00 p.m. should still be listed. Part II: Schedule Jobs with cron To schedule jobs with cron, do the following: 1. At the shell prompt, return to the geeko user account by entering exit. 2. Schedule a cron job as geeko by doing the following: a. Enter crontab -e at the shell prompt. The vi editor is displayed with geeko s crontab file loaded. 123

124 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook b. Press Ins to enter insert mode. c. Schedule finger to run every minute and write the output to the ~/users.log file by entering the following: ***** finger >> ~/users.log d. Press Esc. e. Save the file and exit the vi editor by entering :wq. f. Watch the users.log file for a few minutes and validate that it is being updated by entering tail -F ~/users.log at the shell prompt. NOTE: The -F option is a shortcut for -f --retry that keeps trying to open a file even if it is inaccessible when tail starts. You should see output similar to the following: Figure 9-3 g. When finished, press Ctrl+c to break out of tail. 3. Remove geeko s crontab file by entering crontab -r at the shell prompt. 4. Verify that the crontab file no longer exists by entering crontab -l at the shell prompt. 5. Verify that the cron job you defined in Step 2 is no longer active by entering tail -f ~/users.log at the shell prompt. Notice that entries to users.log are no longer being added. 6. Press Ctrl+c. 7. Schedule a cron job as root: a. At the shell prompt, enter su - followed by a password of novell. b. Enter crontab -e. c. Press Ins. d. Add a job that runs at 2:00 a.m. every Tuesday and creates a tarball of /etc that is saved in /tmp by entering the following: 02**2tar czvf /tmp/etc.tgz/etc e. Press Esc. 124

125 Figure 9-4 f. Save the file and exit the vi editor by entering :wq. Administer Linux Processes and Services g. Verify that the job is in the crontab file for root by entering crontab -l at the shell prompt. You should see the following: Novell Training Services (en) 15 April Remove root s crontab file by entering crontab -r at the shell prompt. 9. Verify that the crontab file no longer exists by entering crontab -l at the shell prompt. 10. Close all open windows. (End of Exercise) 125

126 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 126

127 SECTION 10 Manage Backup and Recovery Manage Backup and Recovery In this section of the workbook, you learn how to do the following: Back Up System Files with YaST on page 128 In this exercise, you learn how to perform a system backup with YaST. Create Backup Files with tar on page 131 In this exercise, you learn how to use tar. Create Drive Images with dd (Optional) on page 133 In this exercise, you use dd to create a drive image. Back Up a Home Directory with rsync on page 136 In this exercise, you learn how to use rsync. Configure a cron Job for Data Backups on page 140 In this exercise, you use cron for data backup. Novell Training Services (en) 15 April

128 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 10-1 Back Up System Files with YaST In this exercise, you perform a system backup with the YaST System Backup module. Complete the following: 1. If necessary, power on you DA1 server and log in as geeko with a password of novell. 2. Select Computer > YaST. 3. When prompted, enter a root password of novell. 4. In YaST, select System > System Backup. 5. Select Profile Management > Add. 6. Enter Course3102; then click OK. The following is displayed: Figure In the Filename field, enter /tmp/course3102.tar. 8. Click Next. 9. In the Backup Options screen, use the default selections by clicking Next. A list of directories and file systems which are not going to be included in the backup is displayed. 10. Under Items Excluded from Search, select Add > Directory. 128

129 Figure Enter /home; then click OK. Manage Backup and Recovery We will assume that the home directories are backed up using a different utility. Your Search Constraints screen should appear as shown below: Novell Training Services (en) 15 April Click OK. 13. In the profile overview, make sure the profile Course3102 is highlighted; then click Create Backup. Wait until the backup has been completed. (This will take some time to complete.) 14. In the Backup Summary, click OK; then click OK in the System Backup screen. 15. Review the structure of the tar archive in /tmp/course3072.tar by doing the following: a. Open a terminal window and switch to your root user account by entering su - at the shell prompt followed by a password of novell. b. At the shell prompt, enter tar -tf /tmp/course3102.tar. 129

130 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 10-3 You should see output similar to the following: (End of Exercise) 130

131 Exercise 10-2 Create Backup Files with tar Manage Backup and Recovery In this exercise, you use tar to create a full backup and an incremental backup. Complete the following: Part I: Create a Full Backup on page 131 Part II: Create an Incremental Backup on page 131 NOTE: In this exercise, you copy backup files to the directory /tmp. This is done for demonstration purposes only. You should never store an actual backup in the /tmp directory. Part I: Create a Full Backup To create a full backup, do the following: 1. If necessary, power on your DA1 server and log in as geeko with a password of novell. 2. Open a terminal window and su - to root using a password of novell. 3. Change to the /srv/www directory by entering cd /srv/www/ 4. Create a tar archive of the htdocs directory by entering tar czf /tmp/htdocs.tar.gz htdocs 5. Delete the htdocs directory by entering rm -r htdocs 6. Copy the backup archive to the /srv/www directory by entering cp /tmp/htdocs.tar.gz /srv/www 7. Restore the htdocs directory by entering tar xzf htdocs.tar.gz 8. View the content of the restored directory by entering ls htdocs Part II: Create an Incremental Backup To create an incremental backup, do the following: 1. Create a full backup of the htdocs directory by entering tar czv -g /tmp/snapshot_file -f /tmp/htdocs_full.tar.gz htdocs 2. Create a new file in the htdocs directory by entering touch htdocs/incremental.html 3. Perform an incremental backup by entering tar czv -g /tmp/snapshot_file -f /tmp/htdocs_incremental.tar.gz htdocs Novell Training Services (en) 15 April

132 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 10-4 Note that tar backs up the file incrementally. 4. View the content of the incremental backup file by entering tar -tzf /tmp/htdocs_incremental.tar.gz You should see output similar to the following: 5. Remove the htdocs directory by entering rm -r htdocs 6. Unpack the full backup by entering tar xzf /tmp/htdocs_full.tar.gz 7. Unpack the incremental backup by entering tar xzf /tmp/htdocs_incremental.tar.gz 8. Close all open windows. (End of Exercise) 132

133 Exercise 10-3 Figure 10-5 Create Drive Images with dd (Optional) In this exercise, you use dd to create a drive image from an optical disc. Complete the following: Manage Backup and Recovery 1. Connect your DA1 virtual machine to the 3102_CD.iso file located in the Exercises/10-3 directory on your course DVD by doing the following: a. If an optical disc icon is displayed on your DA1 desktop, right-click it and select Unmount Volume. b. In your DA1 VMware window, select VM > Removable Devices > CD- ROM > Disconnect. c. If necessary, insert your 3102 course DVD in your host workstation s optical drive. d. In your DA1 VMware window, select VM > Removable Devices > CD- ROM > Edit. e. Select Use ISO Image; then browse to and select the 3102_CD.iso file located in the Exercises/10-3 directory on your course DVD. f. Select Connected; then click OK. g. When prompted for root s password, enter novell. You should see the GNOME File Browser window open displaying the contents of the disc: Novell Training Services (en) 15 April

134 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 2. Close the File Browser window. 3. Open a terminal window and su - to root using a password of novell. 4. At the shell prompt, enter mount. 5. In the output, look for an entry /dev/sr0 on /media/ Note the corresponding device name (listed in the first column of the output): 7. Copy an image of the CD to the hard disk by entering the following at the shell prompt: dd if=/dev/device_name of=/tmp/course_cd.iso You should see output similar to the following: Figure When the copy process is complete, mount the image file by entering mount -o loop /tmp/course_cd.iso /mnt/ 9. Change to the /mnt/ directory by entering cd /mnt at the shell prompt. 10. Display the content of the image file by entering ls at the shell prompt. You should see the files from the CD, as shown below: Figure Enter cd /media/3102_cd; then enter ls. 134

135 Figure 10-8 Note that the content of the image file is identical to the original CD: Manage Backup and Recovery 12. Change to your home directory and unmount the image file by entering the following commands: cd ~ umount /mnt 13. Delete the image file by entering rm /tmp/course_cd.iso 14. Connect your DA1 virtual machine back to your host workstation s optical drive by doing the following: a. Right-click the 3102_CD volume on your desktop and select Unmount Volume. b. In your DA1 VMware window, select VM > Removable Devices > CD- ROM > Disconnect. c. If necessary, insert your SLES 11 installation DVD in your host workstation s optical drive. d. In your DA1 VMware window, select VM > Removable Devices > CD- ROM > Edit. e. Mark Use Physical Drive; then select your optical drive in the drop-down list displayed. f. Mark Connected; then click OK. g. When prompted for root s password, enter novell. h. Close all open windows. (End of Exercise) Novell Training Services (en) 15 April

136 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 10-4 Back Up a Home Directory with rsync In this exercise, you use rsync to backup a user s home directory. Complete the following: Part I: Perform a Local Backup with rsync on page 136 Part II: Perform a Remote Backup with rsync on page 137 Part I: Perform a Local Backup with rsync To perform a local backup with rsync, do the following: 1. On your DA1 virtual server, log in as geeko with a password of novell (if necessary) and open a terminal window. 2. Switch to root using the su - command along with a password of novell. 3. Create a test backup directory by entering mkdir /tmp/rsync_test at the shell prompt. 4. Copy geeko's home directory to the backup directory by entering the following command at the shell prompt: rsync -av /home/geeko /tmp/rsync_test 5. At the shell prompt, enter cd /tmp/rsync_test. 6. Enter ls to view the files copied by rsync. You should see all of the files in geeko s home directory, as shown below: Figure At the shell prompt, enter cd ~. 8. Open a second terminal window. 9. As the geeko user, create a new file by entering touch new_file at the shell prompt. 10. Switch to the root terminal window and enter the same rsync command again: rsync -av /home/geeko /tmp/rsync_test 136

137 Figure Manage Backup and Recovery Notice that rsync transfers only the new file and the corresponding directory: Novell Training Services (en) 15 April 2009 Part II: Perform a Remote Backup with rsync In this part of the exercise, you preform a a remote backup to your DA-SLED virtual workstation from DA1. Do the following: 1. If necessary, power on your DA-SLED virtual workstation and wait for it to boot. 2. Open the ssh port in the firewall on DA-SLED by doing the following: a. On DA-SLED, select Computer > YaST. b. Select Security and Users > Firewall. c. On the left, select Allowed Services. d. In the Service to Allow drop-down list, select Secure Shell Server. e. Click Add. f. Click Next > Finish. g. Close YaST. 3. Switch back to your DA1 server. 4. From the root terminal window on DA1, perform a remote backup of the geeko user s home directory on DA-SLED by entering the following at the shell prompt (all on one line): rsync -ave ssh root@da-sled.digitalairlines.com:/home/geeko /tmp/ rsync_test 5. When prompted to accept the security certificate, enter yes. 6. When prompted, enter a password of novell. 137

138 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure You should see the geeko user s files on DA-SLED being synchronized to your DA server, as shown below: 7. Switch to your DA-SLED workstation and do the following: a. Open a terminal session on DA-SLED. b. As geeko, create a new file in the geeko home directory by entering touch ~/ new_file2 at the shell prompt. 8. Switch back to your DA1 server. 9. Enter the rsync command again at the shell prompt: rsync -ave ssh root@da-sled.digitalairlines.com:/home/geeko /tmp/ rsync_test 10. When prompted, enter a password of novell. 138

139 Figure Manage Backup and Recovery Notice that only new files created since the last time rsyc was run are copied: Novell Training Services (en) 15 April Clean up the backup directory by entering rm -r /tmp/rsync_test/* 12. Close all terminal windows on both virtual machines. (End of Exercise) 139

140 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 10-5 Configure a cron Job for Data Backups In this exercise, use cron to automate the backup process. Complete the following: 1. On your DA1 virtual server, log in as geeko with a password of novell (if necessary) and open a terminal window. 2. Switch to root using the su - command and a password of novell. 3. Change to the /usr/local/bin/ directory by entering cd /usr/local/bin at the shell prompt. 4. Create the home_backup.sh file in the current directory by entering vi home_backup.sh at the shell prompt. 5. Press Ins; then add the following lines to the file: #!/bin/bash rsync -a /home/geeko /tmp/rsync_test 6. Press Esc; then enter :exit to save the file and close the editor. 7. Make the file executable by entering chmod 744 home_backup.sh at the shell prompt. 8. To edit root s crontab, start the crontab editor by entering crontab -e at the shell prompt. 9. Press Ins; then enter the following: 5_minutes_in_the_future * * * /usr/local/bin/home_backup.sh For example, to have the backup script run at 3:30, you would enter the following: * * * /usr/local/bin/home_backup.sh 10. Press Esc; then enter :exit to save the file and close the editor. 11. Wait five minutes, then verify that the backup ran by entering the following at the shell prompt: ls /tmp/rsync_test 12. Close all open windows on DA1. (End of Exercise) 140

141 SECTION 11 Administer User Access and Security Administer User Access and Security In this section of the workbook, you learn how to do the following: Configure PAM Authentication on page 142 In this exercise, you practice configuring PAM authentication. Configure sudo on page 144 In this exercise, you practice configuring sudo. Configure the Password Security Settings on page 147 In this exercise, you practice changing different security settings. Use ACLs on page 149 In this exercise, you practice using ACLs. Configure SuSEfirewall2 on page 153 In this exercise, you practice configuring the host-based firewall on SLES 11. Novell Training Services (en) 15 April

142 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 11-1 Configure PAM Authentication In this exercise, you practice configuring PAM authentication on DA1. You will create a file that prevents all normal users (such as geeko) from logging in and test the system. Complete the following: 1. If necessary, power on your DA1 server and log in as geeko with a password of novell. 2. In the graphical desktop, switch to virtual console 3 by pressing Ctrl+Alt+F3. 3. Log in as root with a password of novell. 4. Create the /etc/nologin file by entering the following command at the shell prompt: echo No login possible > /etc/nologin 5. Switch to virtual console 4 by pressing Alt+F4. 6. Attempt to log in as geeko. A No login possible and a Login incorrect message are displayed, indicating that you cannot log in to the system: Figure Switch back to virtual console 3 by pressing Alt+F3. 8. View the last lines of the file /var/log/messages by entering the following at the shell prompt: tail /var/log/messages Look for the FAILED LOGIN message for geeko that indicates the failed login attempt: Figure Edit the file /etc/pam.d/login configuration file by doing the following: a. At the shell prompt, enter vi /etc/pam.d/login. 142

143 b. Switch to insert mode by pressing Ins. c. Add a # sign to the beginning of the following line: auth requisite pam_nologin.so Administer User Access and Security This PAM module checks to see if the file /etc/nologin exists. If it does, it does not allow regular users to log in by returning a failed status. Now that this line is commented out, PAM will not check for the file. This means that all users can log in, even if the file exists. d. Press Esc; then save the file by entering :w. 10. Test the modified PAM configuration file: a. Switch to virtual console 4 by pressing Alt+F4. b. Attempt to log in as geeko with a password of novell. You are able to log in because PAM no longer checks for the /etc/nologin file. c. Log out as geeko by entering exit. 11. Edit the file /etc/pam.d/login to uncomment the pam_nologin.so line: a. Switch to virtual console 3 by pressing Alt+F3. b. In the vi editor, press Ins. c. Uncomment the pam_nologin.so line (by removing the # sign you entered before) so it looks like the following: auth requisite pam_nologin.so d. Press Esc; then save the file and exit vi by entering :wq. 12. On virtual console 4, try logging in again as geeko. Again, you receive a Login incorrect message. 13. Press Alt+F Delete the file /etc/nologin by entering rm /etc/nologin at the shell prompt. 15. Press Alt+F Try again to log in as geeko with a password of novell. Because the /etc/nologin file no longer exists, user login is enabled again. 17. Log out as geeko by entering exit. 18. Press Alt+F Log out as root by entering exit. 20. Return to the server desktop by pressing Alt+F7. Novell Training Services (en) 15 April 2009 (End of Exercise) 143

144 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Exercise 11-2 Configure sudo In this exercise, you practice configuring sudo to allow the geeko user to kill processes on DA1 as root. Complete the following: 1. If necessary, log into DA1 as geeko with a password of novell. 2. Open a terminal window. 3. Switch to root using the su - command and password of novell. 4. At the shell prompt, enter visudo. 5. Press Ins. 6. Scroll down to the Defaults targetpw... line. 7. Comment out the following lines by placing a # at the beginning of each line: Defaults targetpw root # ask for the password of the target user i.e. ALL ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'! 8. Define a User_Alias named POWRUSRS that contains the geeko user account by adding the following line to the end of the file: User_Alias POWRUSRS = geeko 9. Define a Cmnd_Alias named KPROCS that contains the kill and killall commands by adding the following line to the end of the file: Cmnd_Alias KPROCS = /bin/kill, /usr/bin/killall 10. Define a Host_Alias named HSTS that contains the da1 host by adding the following line to the end of the file: Host_Alias HSTS = da1 11. Using the aliases defined above, allow the geeko user to run the specified commands on da1 as root by adding the following line to the end of the file: POWRUSRS HSTS = (root) KPROCS 144

145 Figure 11-3 Administer User Access and Security Novell Training Services (en) 15 April Press Esc; then save your changes and exit the editor by entering :exit. 13. Test your configuration by doing the following: a. At the shell prompt (as root), enter top to start the top process running. b. Open a new terminal window. c. At the shell prompt in the new terminal window (as geeko), enter sudo killall top. d. When prompted, enter geeko s password of novell. 145

146 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 11-4 You should see that top is unloaded in the first terminal window, as shown below: e. Close all open windows on the desktop. (End of Exercise) 146

147 Exercise 11-3 Configure the Password Security Settings Administer User Access and Security In this exercise, you practice editing security settings. You will change the default behavior when Ctrl+Alt+Del is pressed. You will also change the encryption method from blowfish to MD5. Complete the following: 1. If necessary, power on your DA1 virtual server and log in as geeko with a password of novell. 2. Open a terminal window on DA1. 3. Check the setting for the Ctrl+Alt+Del keystroke in the file /etc/inittab by entering grep ctrlaltdel /etc/inittab Note the current setting: Novell Training Services (en) 15 April Start YaST by selecting Computer > YaST and entering a password of novell. 5. Select Security and Users > Local Security. The Security Overview dialog appears. 6. On the left, select Predefined Security Configurations. 7. Make sure Custom Settings is selected. 8. On the left, select Password Settings. 9. From the Password Encryption Method drop-down list, select MD On the left, select Boot Settings. 11. From the Interpretation of Ctrl + Alt + Del drop-down list, select Halt. 12. Apply the new security settings by clicking OK. 13. Close YaST. 14. To test the change, you must first activate the new configuration. This can be done either by rebooting the system or by entering (as root) init q, which reloads the /etc/inittab file. You will do the latter: a. In the terminal window, su - to root using a password of novell. b. Reload the /etc/inittab file by entering init q. 15. Verify that the Ctrl+Alt+Del setting has changed by entering grep ctrlaltdel /etc/inittab Notice that the setting is now shutdown -h instead of what you noted in Step Test this setting by pressing Ctrl+Alt+F2 and then select Send Ctrl+Alt+Del. The system shuts down instead of restarting. 147

148 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook 17. Power the DA1 virtual machine back on and log in as geeko with a password of novell. 18. (Optional) Use the YaST Security settings module to change the default for Ctrl+Alt+Del back to Restart. (End of Exercise) 148

149 Exercise 11-4 Use ACLs Administer User Access and Security In this exercise, you practice using ACLs. In the first part, you create the acl_test directory in /tmp and set rwx rights for the owner only. You then set ACLs to allow the geeko user to change into that directory. In the second part, you create a file in the /tmp/acl_test directory as root using touch. Then you change the default ACLs for the /tmp/acl_test directory to give geeko read and write access to files and directories. In the third part of this exercise, you practice removing the ACLs that you have set. Complete the following: Part I: Configure the ACL of a Directory on page 149 Part II: Configure a Default ACL for a Directory on page 150 Part III: Delete an ACL on page 151 Part I: Configure the ACL of a Directory To configure the ACL of a directory, do the following: 1. If necessary, log in to your DA1 server as geeko with a password of novell. 2. Open a terminal window and su - to root using a password of novell. 3. Change to the directory /tmp by entering cd /tmp 4. Create a test directory by entering mkdir acl_test 5. Limit the file system permissions for the directory by entering chmod 700 acl_test 6. Open a second terminal window as the geeko user. 7. Try changing to the test directory by entering cd /tmp/acl_test/ The command fails, because geeko (who is not the owner of the directory) has no permission to read and change into the directory. 8. Switch to the root terminal session. 9. Display the minimum ACL of the directory by entering getfacl acl_test Novell Training Services (en) 15 April

150 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 11-5 It should appear as follows: 10. Add an extended ACL by entering setfacl -m u:geeko:rwx acl_test/ 11. Switch to the geeko terminal and try to access the directory again by entering cd /tmp/acl_test Because of the extended ACL, you can now change into the directory. 12. Switch to the root terminal and display the extended ACL of the directory by entering getfacl /tmp/acl_test/ It should appear as follows: Figure 11-6 Part II: Configure a Default ACL for a Directory To configure a default ACL for a directory, do the following: 1. In the root terminal window, change to the directory acl_test by entering cd /tmp/acl_test 2. Create a file by entering touch without_default_acl 3. Display the ACL of the new file by entering getfacl without_default_acl Because there is no default ACL for the parent directory, the new file does not have an extended ACL either. 150

151 Administer User Access and Security 4. Set a default ACL for the acl_test directory by entering setfacl -d -m u:geeko:rw /tmp/acl_test/ 5. Create another test file by entering touch with_default_acl 6. Display the ACL of the new file by entering getfacl with_default_acl Because this file was created after the default ACL of the parent directory was set, the new file inherited the ACL. This is shown below: Novell Training Services (en) 15 April 2009 Figure 11-7 Part III: Delete an ACL To delete ACL, do the following: 1. In the root terminal window, remove the ACL by entering setfacl -x u:geeko with_default_acl 2. Display the ACL again by entering getfacl with_default_acl As you can see, the ACL for the user geeko has been removed. If there were ACLs for other users, they would remain unaffected. 3. View the file attributes of with_default_acl by entering ls -l with_default_acl There are still extended attributes (such as the mask + ) in the output. 4. Remove all ACLs by entering setfacl -b with_default_acl 5. Display the ACL again by entering the following commands: getfacl with_default_acl ls -l with_default_acl 151

152 Novell Training Services (en) 15 April 2009 SUSE Linux Enterprise 11 Administration / Workbook Figure 11-8 Notice that the ACL has been removed, as shown below: 6. Close all terminal windows. (End of Exercise) 152

153 Exercise 11-5 Figure 11-9 Configure SuSEfirewall2 Administer User Access and Security In this exercise, you practice configuring SuSEfirewall2 on your DA1 server. You install and configure the Apache Web Server on DA1. Then you enable the firewall on DA1 and configure it to allow Web server traffic. Complete the following: 1. If necessary, log in to DA1 as geeko with a password of novell. 2. Install the Apache Web Server on DA1 by doing the following: a. Select Computer > YaST. b. When prompted, enter a password of novell. c. Select Software > Software Management. d. From the Filter drop-down list, select Patterns. e. Select the Web and LAMP Server pattern, as shown below: Novell Training Services (en) 15 April 2009 f. Click Accept. g. In the Automatic Changes screen, click Continue. h. If prompted, insert your SLES 11 installation DVD and click Retry. Wait while the packages are installed. i. When done, close YaST. j. Open a terminal session. 153