LOGO

GVDH: Nguyn Th Thanh Vn

Nhm thc hin: Nguyn Vn Li 08110168 Dng Th Thu Vn 08110142

FTP
1. Gii thiu 2. Gii thiu chng trnh FTP Server 3. Gii thiu chng trnh FTP Client 4. Ci t VSFTP 5.Cu hnh VSFTP

6. Demo

FTP

1. Gii thiu
Giao thc FTP: File Transfer Protocol. FTP xy dng da trn chun TCP. FTP cung cp c ch truyn tin di dng file. FTP s dng 2 cng: - Cng 20 truyn d liu (data port). - Cng 21 truyn lnh (command port). FTP hot ng 2 ch : - Active - Passive Vi windows mc nh FTP l active, vi Linux mc nh l passive .

FTP

1. Gii thiu(tt)
Active FTP( ch ch ng):

FTP

1. Gii thiu(tt)
Bc 1: FTP client dng 1 cng ngu nhin khng dnh ring(N>1024) kt ni vo cng 21 ca FTP Server v gi lnh port 1027. Bc 2: FTP Server gi xc nhn v client. Bc 3: FTP Server khi to kt ni t cng 20 v cng N+1 ca client khai bo. Bc 4: FTP client gi xc nhn ACKs n cng data(20) ca Server.

FTP

1. Gii thiu(tt)
Khi FTP server hot ng ch ch ng th Client khng to kt ni tht s vo FTP server m n gin ch l thng bo cho server n ang lng nghe trn cng no v server phi kt ni ngc v client vo cng . Trn quan im ca Firewall i vi my client th ging nh 1 h thng bn ngoi kt ni vo h thng bn trong, iu ny thng b ngn chn bi Firewall.

FTP

1. Gii thiu(tt)
Passive FTP( c ch b ng): ch b ng Client kt ni n server trnh vn Firewall lc kt ni n cng ca my bn trong server.

FTP

1. Gii thiu(tt)
Bc 1: Client kt ni vo cng lnh (21) ca Server v pht lnh PASV. Bc 2: Server tr li bng lnh port 2024, cho bit cng 2024 ang m nhn kt ni. Bc 3: client to kt ni truyn d liu t cng d liu ca n n cng d liu 2024 ca server. Bc 4: Server gi xc nhn ACKs v cng d liu ca Client.

FTP

2. Chng trnh FTP Server

FTP Server l my ch lu gi nhng ti nguyn v h tr giao thc FTP giao tip vi nhng my tnh khc cho php truyn d liu trn internet. Mt s chng trnh FTP server s dng trn Linux: Vsftpd Wu-ftpd PureFTPd ProFTPD

FTP

2. Chng trnh FTP Client

FTP Client l chng trnh dng giao tip vi FTP Server m kt ni ti FTP Server dng lnh ftp<ftp_address>.

FTP

2. Chng trnh FTP Client(tt)

client l win7 cng tng t.

FTP

3. Ci t Vsftpd
Gii thiu: Vsftpd l mt package gip cu hnh dch v ftp server. Vsftpd c kh nng qun l mt s lng kt ni kh ln mt cch hiu qu v an ton. Ci t: - Kim tra ci t VSFTP hay cha: rpm -qa vsftpd - Ci t:

FTP

3. Ci t Vsftpd(tt)
Kim tra ci t thnh cng dch v FTP trong my:

FTP

4. Cu hnh
Cc file cu hnh: - /etc/pam.d/vsftpd: tp tin cu hnh PAM cho vsftpd. Tp tin ny nh ngha nhng yu cu m client phi cung cp khi ng nhp vo ftp server. - /etc/vsftpd/vsftpd.conf: tp tin cu hnh vsftpd server. - /etc/vsftpd.ftpuser: lit k nhng ngi dng khng c login vo vsftpd. Mc nh danh sch ny gm root, bin, daemon v nhng ngi khc.

FTP

4. Cu hnh(tt)
Cc file cu hnh(tt): - /etc/vsftpd.user_list: lit k nhng ngi dng b cm hoc c php truy cp vo ftp server. iu ny ph thuc vo ty chn userlist_deny c set YES hoc NO trong tp tin vsftpd.conf. * Lu : nhng ngi dng lit k danh sch ny th khng xut hin danh sch /etc/vsftpd.ftpuser. - /var/ftp/: th mc cha nhng tp tin p ng cho vsftpd.

FTP

4. Cu hnh(tt)
Cc ty chn i vi vic ng nhp v iu khin truy cp: anonymous_enable=YES/NO. cmds_allowed: ch ra danh sch cc lnh c cho php bi FTP Server. local_enable=YES/NO: cho php ngi dng cc b login vo FTP Server hay khng. userlist_deny=YES/NO: cho php cc user trong file user_list kt ni vo FTP Server

FTP

4. Cu hnh(tt)
Cc ty chn i vi ngi dng anonymous: anon_mkdir_write_enable=YES: kt hp vi write_enable=YES th user anonymous c php to th mc mi trong th mc cha c quyn ghi. anon_root: ch ra th mc gc ca user anonymous, mc nh l /srv/ftp. anon_upload_enable=YES kt hp vi write_enable=YES th user anonymous c php upload tp tin. anon_world_readable_only=YES: user anonymous ch c php download nhng tp tin c quyn c.

FTP

4. Cu hnh(tt)
Cc ty chn i vi ngi dng cc b : Chmod _enable : cho php ngi dng cc b thay i quyn hn trn tp tin. Chroot_local_user : nu ty chn c gi tr YES th ngi dng cc b c th di chuyn n th mc home, sau khi login. Local_root : ch ra th mc vsftpd sau khi ngi dng cc b login vo.

FTP

4. Cu hnh(tt)
Cc ty chn i vi vic truyn tp tin: write_enable=YES/NO: cung cp quyn ghi cho ngi dng. chown_uploads=YES/NO: Thay i quyn s hu nhng file c upload bi root cho user khc. Khng nn dng root upload file chown_username: ch ra user s hu nhng tp tin c upload bi user anonymous (mc nh l root). Nu mun cho mi ngi th dng : whoever

FTP

5. FTP client
Mt s tp lnh ca FTP client. help [command]: cho bit hng dn v lnh command. bye: kt thc ftp session. close: ngt kt ni vi my ch. cd remote-directory: thay i ng dn trn FTP Server. del [remote-file]: xa file trn Server. mdelete [remote-file] []: xa nhiu file trn Server.

FTP

5. FTP client(tt)
ls: lit k ni dung th mc trn my ch. put <local-file> [remote-file]: upload local-file ln my ch vi tn mi l remote-file. get [remote-file]: download remote-file v. mget [remote-file] []: download nhiu file trn Server. pwd: xem th mc hin ti. prompt: tt c ch confirm sau mi ln download file. rmdir [directory]: xa th mc.

FTP

6. TEST

Demo v kim tra kt qu cu hnh

DHCP

DHCP
1. Khi nim 2. Nguyn tc hot ng 3. Ci t 4. Cu hnh 5. Khi ng dch v 6. Cc trng hp khc DHCP

7. Test

DHCP

1. Khi nim
DHCP (Dynamic host configuration protocol): l mt giao thc cu hnh t ng a ch IP.
DHCP gip cho ngi qun tr n gin ha vic cu hnh a ch IP. DHCP Server cung cp a ch IP, Subnetmask, Defaut Gateway v a ch DNS server cho cc my tnh trong mng.

DHCP

2. Nguyn tc hot ng

DHCP

2. Nguyn tc hot ng(tt)

u tin my Client cha c IP s broadcasts n tt c cc my trong h thng mng mt gi tin l DHCPDISCOVER yu cu cp pht IP. Mc d tt c mc my u nhn thy yu cu ny nhng duy ch c my DHCP Server mi tr li cho my Client yu cu. Khi n s gi mt gi tin DHCPOFFER broadcasts n tt c cc my Client trong h thng mng xem IP m n sp gn cho Client yu cu c hp l hay khng?

DHCP

2. Nguyn tc hot ng(tt)

Tuy nhin ch c mi my Client yu cu a ch IP mi hi p m thi, khi s broadcasts mt gi tin mi l DHCPREQUEST n tt c cc my trong h thng mng xin c thu IP ny Sau khi c gn IP mi thnh cng my Client ny tip tc broadcasts n tt c cc my trong h thng mng mt gi tin mi l DHCPACK nhm thng bo l n ang s dng IP ny

DHCP

3. CI T
s dng dch v DHCP, ta phi ci t cc gi dch v c sn trn a CD c phn ui m rng l .rpm hoc ci t t ng nu my c kt ni internet. Ci t trn a CD: Mount th mc cha gi ci t DHCP vo my ch CentOS: #mount /dev/cdrom /media/ Ci t dch v DHCP: #rpm -ivh /media/CentOS/dhcp-*.rpm (* l phin bn ca gi dch v).

DHCP

4. CU HNH
Gi DHCP RPM chun khng t ng ci t file cu hnh /etc/dhcpd.conf nn file cu hnh cha c g c. cu hnh, ta phi copy file cu hnh mu vo /etc/dhcpd.conf # cp /usr/share/doc/dhcp-*/dhcpd.conf.sample /etc/dhcpd.conf (vi * l phin bn ca gi dch v)

DHCP

4. CU HNH(tt)

DHCP

5. KHI NG DCH V
Khi ng dch v DHCP :

6. CC TRNG KHC CA DHCP

DHCP

Mt my DHCP Sever cp nhiu subnet v dy ip khc nhau : Mun my server cp thm mt dy ip mi th trong tp cu hnh: dhcpd.conf phi khai bo thm

Sau khi ng li dch v

DHCP

7. TEST

Demo v kim tra kt qu

WEB SERVER
1. Gii thiu v Web Server 2. Ci t Apache 3. Cu hnh Web Server 4. Chng thc truy cp

5. iu khin truy cp

6. Virtual Host 7. Cu hnh Apache h tr php

8. Test

WEB SERVER

1. Gii thiu
A. Gii thiu Web Server ng dng web l mt ng dng ch/khch (client/server) s dng giao thc HTTP tng tc gia ngi dng vi h thng khc. Trnh khch (client) l cc trnh duyt web nh Internet Explorer (IE), FireFox, Google Chrome, Opera, Trnh ch (server) tip nhn v x l cc yu cu t trnh khch, v d: Apache, IIS,

WEB SERVER

1. Gii thiu(tt)
HTTP: l mt giao thc cho php trnh duyt Web browser v server c th giao tip vi nhau. N chun ha cc thao tc c bn m mt Web server phi lm c. Web server lng nghe cc kt ni thng qua cng 80.

WEB SERVER

1. Gii thiu(tt)
B. Hot ng ca Web Server 1. Xt Web Server mc phc v cc ni dung tnh. - Web Server nhn 1 yu cu t Web Browser l 1 ng dn c dng http://www.hcmute.edu.vn/index.html. N s nh x ng dn ny thnh 1 tp tin cc b trn my Web server. My ch s ly tp tin ny t a v a v cho Web browser. - Web server v Web browser s dng giao thc HTTP truyn d liu qua li.

WEB SERVER

1. Gii thiu(tt)
B. Hot ng ca Web Server 2. Xt Web Server mc phc v cc ni dung ng - Web server tip nhn yu cu t Web browser. - Ly ni dung t a. - Chy cc chng trnh CGI. - Truyn d liu ngc li cho Web browser.

WEB SERVER

1. Gii thiu(tt)
C. Gii thiu Web Client - L nhng trnh duyt web pha ngi dng nh Internet Explore, FireFox, Opera hin th nhng thng tin trang web cho ngi dng. - Web Client s gi yu cu n Web Server (gi ng dn). - Web Server x l yu cu v gi kt qu v li cho Web Client.

WEB SERVER

1. Gii thiu(tt)
C. Gii thiu Web ng - Web ng l cc trang web c to ra p ng cc d liu nhp vo ca ngi dng. - Cch ph bin cho vic to ni dung ng l s dng Common Gateway Interface(CGI). CGI nh ngha cch thc Web Server chy 1 chng trnh cc b v ly c kt qu tr v cho Web Browser.

WEB SERVER

1. Gii thiu(tt)
C. Gii thiu Web ng(tt) - Minh ha Web Browser yu cu 1 trang web ng.

WEB SERVER

2. Apache
A. Gii thiu:
Apache l 1 phn mm c tnh nng mnh v linh hot dng lm Web Server. Cc giao thc: HTTP, HTTPS, FTP, M ngun m, free license. HH: UNIX, Linux, Windows, Netware, OS/2. H tr nhiu ngn ng kch bn (scripts). Cu hnh v m rng vi cc module. LAMP (Linux, Apache, MySQL and Perl/Python/PHP).

WEB SERVER

2. Apache(tt)
B. Ci t
- Kim tra Apache c ci t hay cha: rpm -qa | grep httpd - Ci t nu cha ci t: rpm ivh httpd-2.2.3-11.el5_1.centos.3.i386.rpm - Nu Apache c ci t:

WEB SERVER

3. Cu hnh Web Server

- File dng cu hnh Apache cho Web Server l /ect/httpd/conf/httpd.conf - To th mc gc cho website: mkdir /var/www/html/webtest - To 1 trang html: gedit /var/www/html/webtest/web.html

WEB SERVER

3. Cu hnh Web Server(tt)

vi /ect/htpd/conf/htpd.conf m v chnh sa file cu hnh Sa file cu hnh httpd.conf nh sau: ServerRoot "/etc/httpd # V tr ci t Apache Timeout 120 # Thi gian sng ca 1 kt ni KeepAlive On # Cho php client gi nhiu yu cu n server qua nhiu kt ni. MaxKeepAliveRequests 100 # s ln request ti a trong 1 kt ni. KeepAliveTimeout 15 # thi gian timeout ca 1 request.

WEB SERVER

3. Cu hnh Web Server(tt)

Listen 80 # lng nghe port 80 User Apache Group Apache # User v Group chy httpd ServerAdmin root@localhost # email ca ngi admin ServerName www.webtest.com:80 # Khai bo a ch URL DocumentRoot "/var/www/html/webtest #Th mc gc ca web server.

WEB SERVER

3. Cu hnh Web Server(tt)

<Directory "/var/www/html/webtest"> Options Indexes MultiViews AllowOverride None Order allow,deny Allow from all </Directory> DirectoryIndex web.html # tp tin mc nh khi chy web ErrorLog logs/error_log # Lu cc error_log CustomLog logs/access_log # Lu cc access_log

WEB SERVER

3. Cu hnh Web Server(tt)

khi ng chkconfig on service httpd restart - V d sau khi sa file cu hnh xong restart li dch v:

WEB SERVER

3. Cu hnh Web Server(tt)

Truy cp:

WEB SERVER

3. Cu hnh Web Server(tt)

Cc tp tin v th mc cu hnh ca web server: /etc/httpd/conf: cha cc file cu hnh nh httpd.conf. /etc/httpd/modules: lu tr cc module. /etc/httpd/logs: cc file log. /var/www: lu cc trang web. /var/www/cgi-bin: cha cc script.

WEB SERVER

4. Chng thc truy cp

A. Basic Authentication: mt khu s khng c m ha.
Cc bc cu hnh: Bc 1: to file v cp quyn truy xut # htpasswd [-c] <file-path> <username> -c: to file mi. Nu file tn ti th b xa ni dung c v ghi vo ni dung mi. Khi to thm mt ngi dng khng cn -c. # chmod 755 <file-path>

WEB SERVER

4. Chng thc truy cp

V d:

WEB SERVER

4. Chng thc truy cp(tt)

Bc 2: Cu hnh chng thc trn Apache:
<Directory "/var/www/html/webtest"> AuthType basic AuthName "Temporary" AuthUserFile "/etc/httpd/conf/passwords" Require user usr1 </Directory>

Nh vy khi ng nhp bng usr1 th c, cn usr2 th khng vo c.

+ AuthType: Loi Authentication. + AuthName: Tn Authentication. + AuthUserFile: V tr tp password. + AuthGroupFile: V tr tp group. + require user <username>: user c php truy cp ti nguyn. + require group <groupname>: nhm ngi dng c php truy cp ti nguyn. Password ca ngi dng nhm cng c lu trong file AuthUserFile.

WEB SERVER

4. Chng thc truy cp(tt)

Bc 3: To file cha nhm ngi dng. File nhm ngi dng c dng:
<groupname>: <username-1> <username-2> <username-n> V d: vi /etc/httpd/conf/groups web: usr1 usr2

Cu hnh Apache:
<Directory "/var/www/html/webtest"> AuthType basic AuthName "Temporary" AuthUserFile "/etc/httpd/conf/passwords" AuthGroupFile "/etc/httpd/conf/groups" Require Group web </Directory> C usr1 v usr2 u vo c.

WEB SERVER

4. Chng thc truy cp(tt)

Truy cp:

WEB SERVER

4. Chng thc truy cp(tt)

B. Digest Authentication
- c cung cp bi mod_auth_digest. username v password khng gi dng plantext m s c m ha thng qua thut ton MD5. Cc bc cu hnh: Bc 1: to tp tin dng lnh htdigest:
# htdigest [-c] <file-path> realm <username> # chmod 755 <file-path>

WEB SERVER

4. Chng thc truy cp(tt)

V d:

WEB SERVER

4. Chng thc truy cp(tt)

Bc 2: Cu hnh /etc/httpd/conf/httpd.conf:
<Directory "/var/www/html/webtest"> AuthType Digest AuthName "Pravite" AuthDigestFile /usr/local/digest # AuthDigestGroupFile /usr/local/groupdigest Require user admin1 </Directory>

WEB SERVER

4. Chng thc truy cp(tt)

Bc 3: To file cha nhm ngi dng. File nhm ngi dng c dng:
<groupname>: <username-1> <username-2> <username-n> g lnh: vi /usr/local/groupdigest web: admin1 admin2

Cu hnh Apache:
AuthType Digest AuthName "Pravite" AuthDigestFile /usr/local/digest AuthDigestGroupFile /usr/local/groupdigest Require group web

WEB SERVER

5. iu khin truy cp
Ngoi vic bo mt ni dung ca website bng s chng thc v username password, apache cn gii hn vic truy cp ca ngi dng da trn nhng thng tin khc c cp trong Access Control. S dng directive Allow/Deny cho php/ cm vic truy cp ti nguyn da trn tn my tnh hoc a ch IP. C php khai bo:
Allow/Deny from [address] + Allow/Deny c ngha cho php/cm cc host/ network/domain truy xut vo website. + [address]: a ch IP/a ch ng mng hoc tn my tnh, tn min

WEB SERVER

5. iu khin truy cp(tt)

V d: Deny from 192.168.1.2 # my c a ch ip 192.168.1.2 khng c truy cp vo trang web.

WEB SERVER

5. iu khin truy cp(tt)

S dng Order kt hp gia Allow v Deny. Nu Order Allow, Deny th Allow c kim tra trc. Bt c client no khng tha iu kin ca allow hoc tha iu kin ca Deny th khng c truy cp. Nu Order Deny, Allow th Deny c kim tra trc. Bt c client no khng tha iu kin ca deny hoc tha iu kin ca allow th c php truy cp. V d: Order Allow, Deny Allow 192.168.1 Deny 192.168.1.2

WEB SERVER

5. iu khin truy cp(tt)

V d v 1 iu khin truy cp t gii hn nht: <Directory "/var/www/html/webtest"> Options Indexes MultiViews AllowOverride None Order allow,deny Allow from all </Directory>

WEB SERVER

5. iu khin truy cp(tt)

Statisfy directory Statisfy <all | any>: Mc nh l all, client phi tha mn tt c cc iu kin mi c php truy cp ti nguyn. Any, client ch cn tha mn mt iu kin bt k truy cp ti nguyn. - Mt ng dng cho vic s dng access control l gii hn, nhng ngi dng bn ngoi mng khi truy cp cn username v password cn tt c nhng my tnh trong mng th khng cn.

WEB SERVER

5. iu khin truy cp(tt)

<Directory "/var/www/html/webtest"> AuthType basic AuthName intranet AuthUserFile "/etc/httpd/conf/passwords" AuthGroupFile "/etc/httpd/conf/groups" Require Group web Allow from intranet.com Satisfy any </Directory>

WEB SERVER

6. Virtual Host
Virtual Host l chc nng Apache h tr duy tr nhiu hn 1 web server trn 1 my tnh. C 2 loi: IP- Based virtual hosting: s dng nhiu a ch IP khc nhau cho tng domain. Named- based virtual hosting: 1 IP cho nhiu tn khc nhau, yu cu phi c DNS.

WEB SERVER

6. Virtual Host(tt)
IP- Based virtual host:

WEB SERVER

6. Virtual Host(tt)
To 1 file mi l virtualweb cha virtual.html Sa file cu hnh httpd.cn nh sau:

WEB SERVER

6. Virtual Host(tt)
Restart li dch v: service httpd restart Kim tra:

WEB SERVER

6. Virtual Host(tt)
Named-based virtual host: server da vo HTTP
header ca client bit c hostname. Vi k thut ny, 1 a ch IP c th c nhiu tn my tnh khc nhau. Yu cu cu hnh DNS sao cho n phn gii mi tn my ng vi 1 a ch IP v sau so cu hnh Apache t chc nhng web server cho nhng tn min khc nhau.

WEB SERVER

6. Virtual Host(tt)
Cu hnh: Yu cu ci t DNS To 2 file hoahong v hoalan trong th mc var/www/html/ File hoahong cha trang hong.html v hoalan cha trang lan.html. mkdir /var/www/html/hoahong vi /var/www/html/hoahong/hong.html hoa hong site mkdir /var/www/html/hoalan hoa lan site vi /var/www/html/hoalan/lan.html

WEB SERVER

6. Virtual Host(tt)
Sa file cu hnh /etc/httpd/conf/httpd.conf nh sau:

WEB SERVER

6. Virtual Host(tt)
Truy cp:

WEB SERVER

7. Cu hnh Apache h tr PHP

Kim tra php c ci t hay cha: rpm qa | grep php Nu cha ci t th ci t nh sau:

WEB SERVER

7. Cu hnh Apache h tr PHP(tt)

Kim tra c ci t trn h thng:

To 1 trang home.php trong /var/www/html/php nh sau: gedit /var/www/html/php/home.php G ni dung nh sau: <?php phpinfo(); ?>

WEB SERVER

7. Cu hnh Apache h tr PHP(tt)

Sa file httpd.conf nh sau: DirectoryIndex home.php DocumentRoot /var/www/html/php Truy cp:

WEB SERVER

8. Demo

THE END