Red Hat Enterprise Linux 4.


Unix is the first Operating system in the world, developed by Kem Thompson and Dennis Ritchie in 1969 at Bell Lab by AT&T Company IBM : AIX SGI : IRIX HP : HP Sun : Solaris FSF: Free software foundation organization, they start a project by name GNU. The mail aim of this project is to develop such a O.S that can run on any platform. In 1991, a student Linus Torvalds developed a kernel named Linus’s Kernel plus GNU application called Linux O.S Linux is a open source technology. Different companies that provide Linux in Market are Redhat, SuSe, Mandrake, Turbo, Knoppix etc.

Features and Advantage:
Features: a. Linux is the fastest Operating system in the world. It runs 2 to 3 times fast than windows O.S b. Linux is the very secured O.S because there is no any problem of virus. c. Linux file format is text format and windows file format is binary format. d. Linux is very reliable O.S because kernel of linux is very stable as compare to windows kernel not crashed easily. e. Kernel of linux is very small, it can be stored in floppy f. Linux uses the x-Window system which is advanced network windowing system. Using this system we can display output of any workstation monitor attached in the network Advantages of Linux: a. Virus Proof b. Crash Proof c. Economical d. Multiuser, multi desktop and multi tasking


Red Hat Enterprise Linux 4.0ES

Mode of Login There are two mode of login 1. Text Mode (Alt+ctrl+F1) 2. Graphical Mode (Alt+Ctrl+F7) In case of Text Mode Station2 Login : root Password : redhat [root@station2~]# to switch from one text mode to another Alt+Ctrl+F1 to Alt+Ctrl+F6 In case of Graphical Mode Ctrl+Alt+F7 Common Command Some of the Common system command are as follow: 1. Date : to display date and time 2. Cal : to display the calendar 3. Cal 11 2006 : display the calendar of Month 11 and year 2006 4. Clear : To clear the screen 5. ls : to list directory contents color identification blue : Directories White : Files Green : Executable files Red ; Zip files, rpm, tar file Different switches used with “ls” command ls –l or ll : used for long listing including file and directory permission (-) : file (d) : Directory (l) : Symbolic link ls –a : shows all hidden files and directory. Any file followed by (.) is hidden file ls –al : show all hidden files and directory with long listing or whole description ls –d : shows all the directory 6. pwd: Print working directory 7. who am I : display the information of current terminal 8. who : display all the terminal in a network 9. history : it shows all the command your have used.


Red Hat Enterprise Linux 4.0ES
By default history stores last 1000 command which u have run. If u want to change # vi /etc/profile HIST SIZE =10 Save and exit # history –c ( to clear all the previous command reside in history) Creating file and Directory: a. Creating file: The ‘cat’ command is used to create a file Syntax: # cat > filename example: # cat > abc.txt (Ctrl +D) is used to save the file. b. View the content of file Syntax: # cat filename Example: #cat abc.txt #cat –b abc.txt c. Creating Directory The ‘mkdir’ command is used to create directory Syntax: Mkdir [directory_name] Example: # mkdir raj Option used: cd : To change directory cd .. : To come out from directory cd : to jump to root directory cd - : to jump to previous directory Deleting Files and directory: Syntax: For file: rm <filename> example: rm abc.txt for directory syntax: rmdir <directory_name> Note: Only empty directory will be deleted) If we want to delete the tree structure of directory then we need to use the following command Syntax:


Red Hat Enterprise Linux 4.0ES
rm –rf <directory_name> where r = recursively f= force in order to remove non empty directory Syntax: rm –r <directory> example; rm –r raj this will remove directory step by step ,first remove sub directory and then finally main directory. Another method of creating file : Touch : this command is used to create a blank file with size zero. # touch <filename> Example: #touch abc Copying File and Directory: a. Copy file: Syntax: # cp [source]filename [destination] b. Copy directory #cp –r [source]directory [destination] to copy a directory into another directory recursively c. cp –rf [source]directory [destination] to copy a directory forcefully syntax used for copy file or directory: cp [option] file destination option: -I : interactive : ask before overwriting file -r : Recursive -p : Preserve -f : forcefully More than one file can be copied at a time if the destination is directory Syntax: cp [option] file1 file2 file 3 Destination Moving and Renaming File and Directory Syntax: # mv : move /rename files and directory


Red Hat Enterprise Linux 4.0ES
Example: # mv [option] file destination example: # mv t.txt /home/raj/ more than one file can be moved at a time if the destination is a directory # mv [option] file1 file2 file3 destination Getting Help: The command that are used to get the help are discussed as : a. Whatis Display a short description of command , it uses a database that is updated nightly. Often not available immediately after installation. Syntax: # Whatis cal b. Help Display usage summary and argument list Syntax: <command> --help Example: #Date –help c. Man and Info: Both provide documentation for command. Almost every command has a “man” page. Collection of pages are called linux manual. # man date # info date Viewing Text Page Syntax: #less [option] [filename] Example: # less abc.txt scroll with arrows/PgUp /PgDown /text : n : Option: -c : -s : search for text Next Match Clear before displaying Squeeze multiple blank lines into a single blank line

Simply we can also use “less” along with pipe | as # ll |less


name and 6 .group.0ES File and Directory: ‘ll’ is used to display the information about the files and directory including date. size.Red Hat Enterprise Linux 4. users. Four symbols are used when displaying permission. subhki2000@gmail. R : Read W : Write X : Execute : no permission -rwxrwxrwx : files drwxrwxrwx : directory files and directory permission are symbolized by ten character. time.

g. symbolic 2. +.g. 3.r.o 2.chmod u=w. group get 7 means read/write/execute and ame for other # chmod 531 file/directory in this case user get 5 means that user has permission of read/execute. g-w. Symbolic Method: Syntax: Chmod mode directory/filename Mode Option: 1.= are + operator simply add the new permission with previous one and = assign the new permission while removing old (new permission overwrite an old) 2.o suppose we have one file as test..Red Hat Enterprise Linux 4. # # # # # # # chmod chmod chmod chmod chmod chmod chmod u+rwx file or directory : in case of user only ug+rwx file or directoty : in case of user and group u+w. 6. 7 . group get 3 means write/execute and other get 1 means that other has permission to execute.r. then there are two methods: 1.-r. Numeric Method: In this method.txt permission : -r.g+r. The main difference between +. calculation are based on following numbers r=4 w=2 x=1 0= no permission Example: #chmod 777 file/directory in this case user get 7 means that user has permission of read/write/execute.g+rw directory/file u-r.o+x directory/file u+rw.o-rw directory/file ugo+rwx file/directory ugo-rwx file/directory • + is used to add permission • .o=w test. used remove permission chmod ugo=rw directory/file this command will assign read/write permission to u. Numeric 1. u.0ES If we want to change permission.txt this command will assign write to user. w.x 3. 2. write/execute to group and write to other while remove the previous permission.g=wx. = 1. 7. 4.

Red Hat Enterprise Linux 8 .0ES #chmod 742 file/directory 7 : User : rwx 4 :Group : r 2 : Other : w Linux file system: Figure Root : Etc : server dev : home : proc : disk and it is an home directory of super user (root) administrator it is the location of all configuration file and directory used for configuration or system configuration it is a location of the device file it is a location of home directory or regular users it is a virtual file system or directory not actually store on the contain system information # cat /proc/meminfo # cat /proc/cpuinfo contain kernel and boot related files it is also a virtual directory and contain system information it is a mount point of removable disk like cdrom floppy usb drive boot : sys : media : etc. subhki2000@gmail.

/dev/hdx Where x is a : /dev/hda : Primary master b : /dev/hdb : Primary slave c : /dev/hdc : Secondary master d : /dev/hdd : Secondary slave In case of SCSI. Sata or USB we will use : /dev/sda CD-rom: /dev/cdrom /dev/cdrom1 /dev/cdrecorder Floppy: 9 .EXT3 UNIX : VXFS Representation Of Media Devices: All the device file are stored in /dev/ Hard disk .Red Hat Enterprise Linux 4.0ES tmp : usr : lib : bin : command sbin mnt opt var error : : : : it it it it contain all temporary file is used for software installation contain all library files is the location of all executable files or command or user /usr/bin also contain user command it contain all system command or super user command /usr/sbin it is a mount point for physical hard-disk or partition optional directory and used for temporary working it is a variable file system or directory and contain all log and message file system type: Dos : Fat 16 95/Xp/2000 : FAT32 Xp/NT/2000 : NTFS Linux : EXT2.

0ES /dev/fd0 /dev/fd1 to access partition of windows in linux #mount –t vfat /dev/hdax /mnt in order to check the label of any partition #e2label /dev/hdax where x is number Mounting CD Rom # mount –t auto /dev/hdc /media/cdrom -t : file type auto : file type in order to check where cdrom is attached we can open the file fstab #vi /etc/fstab now in case of RHEl 3.directed by the kernel as SCSI device /dev/sdax Vi Editor: Using vi . # umount /media/floppy Mounting USB media :. command mode 2. Copy.Red Hat Enterprise Linux 4. paste delete. delete. paste. Command mode is again divided into 3 mode a. save and Exit Mode 1. we can create or modify any file Vi. Cursor Movement J : Down K : UP L : RIGHT H : LEFT b.0 we simply type # eject Mounting Floppy #mount –t auto /dev/fd0 /media/floppy in case of floppy we have to umount first then only we remove floppy otherwise all content of floppy may be lost or floppy may be physically damaged. Text search a.0 we have to use command in order to unmount. # umount /media/cdrom and then eject the cdrom in case of RHEL 4. Copy. Cursor movement b. undo c. vim Editor Vi is the standard file editor for Unix and Vim is the standard file editor for Linux For Red hat Linux vi and Vim both are same There are three mode of vi editor 1. undo subhki2000@gmail. insert mode 10 .

service account 1.o. Same is option mode start after one character mode start after one line mode start before one line and Exit : Quiet : forcely quiet : save and forcely quiet : save and exit User and Group Administrator There are three type of user account in Red hat Linux 1.Red Hat Enterprise Linux 4. Save :q :q! :wq! :wq mode start at the point where cursor is. O i : insert used with insert a : insert o : insert O : insert 3. Insert Mode Option I.0ES dd yy u p ndd nyy : : : : : : delete particular line copy particular line Undo paste n is the number of line to be deleted n is the number of line to be copied c. Text Search /text example /then 2. Graphical method by using Red hat user manager utility 11 . insert. Using command line method ‘useradd’ or ‘adduser’ command b. Regular user Account. a . a. # adduser user_name (Recommended : minimum 6 character used password) # passwd user_name Example: #adduser rakesh #passwd rakesh Now open the file /etc/passwd to check the entry of user in subhki2000@gmail. Super User created automatically at the time of installation 2. Regular user account 3. Super user or Administrative account 2.

csh. Group name 2. When any user is created its default home directory is created inside /home /home/rakesh 7th field is login shell. Group we use /etc/login. linux command shell is a prompt that allow us to interact with our system by executing various 12 . groupid of the user syntax: #id username #id rakesh subhki2000@gmail. tcsh. userid 4. login shell password entry for each user will be stored in /etc/shadow # vi /etc/shadow now in order to check the Userid. groupid 5.def # vi /etc/login. groupid automatically from /etc/login. sh. blank (User information field ) comment 6.def when any user account is created then user will get userid.def 5th field is used for user information or comment 6th field is used for home directory.S. password 3.zsh shell is an user interface between user and O. Default shell for user is /bin/bash different shells are used ksh. Member of group # finger user : this command is used to get the information about the Syntax: #finger username #finger rakesh #id : this command is used to get userid. Username 2.Red Hat Enterprise Linux 4.0ES #vi /etc/passwd it contain 7 entry of each user 1. GroupId 4. Password 3. In order to check the shell available use /etc/shells # vi /etc/shells in order to get the information about the group we need /etc/group #vi /etc/group it contain four field 1. home directory 7.

Change Group name #groupmod –n newname oldname #groupmod –n group1 g1 8. change Group id #groupmod –g 2005 group1 Redirecting Input /Output subhki2000@gmail. change shell #usermod –s /bin/bash rakesh 6. To change id of the user #usermod –u 1001 rakesh 3. adding group to the user #usermod –g g1 –G g2 rakesh 13 . change home directory #usermod –d /rakesh-home rakesh –m 5.Red Hat Enterprise Linux 4. change comment #usermod –c rakeshsingh 4. change user login name #usermod –l newname oldname #usermod –l rajesh rakesh 7.0ES Creating Group: Syntax: #groupadd groupname #groupadd –g gid groupname Example: #groupadd raj Exercise: Create a user that should have uid=1000 shell=sh description and home directory as /data Sol: #useradd –u 1000 –c rakeshpundir –s /bin/sh –d /data rakesh #passwd rakesh Grpahically System Setting :-> User & Group OR #system-config-user Every user have two group one is elementary group or primary group and secondary group -g : Primary Group -G : Secondary Group Creating Group #groupadd g1 #groupadd g2 Steps: 1.

Standard error is still displayed on the screen #cat output If the target file of the file redirection with > already exists. redirect further standard error. which normally display on the terminal can be redirected into a file. appending to the same file with 2>> #find /etc/ -name passwd 2>>errorfile #cat errorfile Symbolic links: A symbolic link point to another file. We can display the link name and the referenced file by ‘ls –l’ #ls –l pf lrwxrwxrwx 1 root root pf->/etc/passwd file type: l for symbolic link the content of the symbolic link is the name of the file that is referenced Syntax: Ln –s filename [linkname] Example: Ln –s /etc/passwd password There are seven fundamental file type : regular file d : symbolic link b : block special file c : character special file p : named file subhki2000@gmail.0ES The standard Output of command . Similarly standard 14 .Red Hat Enterprise Linux 4. Common redirection operator > >> < 2> 2>> : : : : : command>file command>>file : command>file command2>file : command2>>file : : output command to file Append output of command to file : receive input from file error from command to file append Example: #find /etc –name passwd this command will search for all file name passwd in /etc and its subdirectories now we can redirtect the standard outpout #find /etc –name passwd > output output is a file where command output will be stored. the existing file will be overwritten. To append data to an existing file use >> to redirect instead of > #find /etc –name passwd >> output Redirecting standard Error We can redirect standard error with 2> #find /etc –name passwd 2>errorfile standard output is displayed on the screen . which normally display on the terminal can be redirected into a file.

com 15 .bashrc alias c=`clear` save and exit Test your change by logging out. disk space free #df –h -h : used multipliers such as G or M for gigabytes and Megabytes The ‘du’ command reports the number of kilobytes contained by the items within a directory #du –s #du –h -s : used to request only the summary directory information #du –s /etc Aliases: Aliases are shortcut names for large commands. df b. Alias c=clear We can make a permanent entry of alias in .Red Hat Enterprise Linux 4. 2048 bytes ls –l /dev |less { to check c and b files} named pipe type of file that passes data between processes.0ES s : socket character special file are used to communicate with hardware one character at a time.bashrc file Type: #vi . Block special file is used to communicate with hardware a block of data at a time : 512 bytes. Checking Free Space: In order to check the free and usage space per file system and directory and each sub directory we have two command a. we can reduce these to an aliases. It stores no data itself socket file are used for inter process communication. but take a considerable amount of typing. disk space used . to change subhki2000@gmail. du the ‘df’ command reports on a per file system basis. It report total disk space . only file created will have 666 permission and directory will have 777. umask is used to withhold permission. A umask of 002 will result in file created with 664 permission and directory with permission 775. without a umask in effect. 1024 bytes. If we have command that run often. Default umask on Red hat enterprise linux is 002. logging back and type the following #alias #c Default Permission: The default permission for files is 666 and directory is 777. this means that anyone on the system will have read and write access to any file. Default root’s umask is 022.

Red Hat Enterprise Linux 16 . By default we have 6 virtual console (text mode). but we van increase or decrease the number of text mode simply by editing the file /etc/inittab #vi /etc/inittab line No 18 : id:5:initdefault (we can change this value from 1 to 5 as per our need) Line No 44 : 1:2345:respawn:/sbin/mingetty tty1 subhki2000@gmail. Run Level: To check the run level we need to see the file /etc/inittab #vi /etc/inittab defaults run – level used by RHS are 0 : hault ( do not set init default to this) 1 : single user mode 2 : multi user mode without networking 3 : multi-user mode with networking 4 : unused 5 : X11 (Graphical) 6 : reboot #runlevel present : this command shows that in which run level you are at in init 3 runlevel.bashrc. The next time you lig in umask will be set bask to your default unless you add command to one of your startup files such as .0ES #umask 022 umask is typically set by script run at login time. if you type command startx to go to the graphical mode then it will not ask you for password.

Text Based Internet Server subhki2000@gmail.Red Hat Enterprise Linux 4. NFS. No firewall 2. Desktop 1. LAN. Graphical Internet 3. FTP Partition type and its size / 10000MB /boot 128MB /home 1000MB swap 256 MB ( 1.0ES 2:2345:respawn:/sbin/mingetty tty2 .5 to 2 times more than RAM Size) to check the RAM size do the following step Ctrl+alt+f7 Then type the following #cat /proc/meminfo this command will display the size and other information regarding RAM Ctrl+Alt+F7 to return to the installation mode. GNOME Application 1. Text Editor 2. For adding 7:2345:respawn:/sbin/mingetty tty7 after editing this file we need to sane and exit #init q : this command is used to activate the change made. . 6:2345:respawn:/sbin/mingetty tty6 in these line if we add one more line the number of virtual console increase and if we remove one line . Selinux disable Following Package are needed at the time of installation. Note: While installation we have to make sure that firewall option should be disable 1. Welcome Message at the time of login: We need to edit the file /etc/motd #vi /etc/motd type any message which we want to display “WELCOME TO ICON” save and exit INSTALLATION: Installation can be done either by CDROM . . X Window 17 . virtual console terminal decrease.

168.S Installation Method : FTP subhki2000@gmail. 5.255. we have to perform the following step First we have to check the rpm of ftp/nfs ftp : vsftp-2. nfs : nfs-utils-1.and 4) inside /var/ftp/pub/RedHat/RPMS/ Now we need to configure the exports file. 6.0ES 1.0.255. Server configuration tools Web Server Mail server DNS server FTP Server Network Server Legacy Network Server ( in this select Telnet) Administrative Tools System tools Printing tools 6132MB 681 MB Max Space Needed : Min Space Needed : While Installing Redhat linux 4.0. 18 .sync) save and exit now start the service #service portmap restart #chkconfig portmap on #service nfs restart #chkconfig nfs on Now Boot the new system from disk 1 of Redhat linux and type Linux askmethod Choose language : English Keyboard Type : U.168.0.0 WS with the help of NFS and FTP. 3. 7. 4. 3.6…… Now copy the disk 1 of the Redhat linux into the folder “/var/ftp/pub” Now copy RPMS of remaining CD’s (Disk 2.254 NFS Dierctory : /var/ftp/pub And continue the installation There is slightly change in case of FTP In case of FTP: Boot the system from disk 1 of redhat linux and type Linux askmethod Choose language : English Keyboard Type : U.3. System 1. 2.0/255.0(rw.0.1…….S Installation Method : NFS Image NFS Server name : 192.Red Hat Enterprise Linux 4. #vi /etc/exports /var/ftp/pub 192. /var/ftp/pub 192.Red Hat Enterprise Linux 4.168.cfg And continue the installation subhki2000@gmail.0 mount point : pub ( as in case of FTP the default path is /var/ftp) and continue the installation Kick Start Kick start is one of the automatic installation method.0.255.255.sync) Now start the service #service portmap restart #chkconfig portmap on #Service nfs restart #chkconfig nfs on #service dhcpd restart #chkconfig dhcpd on Now boot the new system by Disk 1 of RedHat linux And type Linux ks=nfs:192.254 255.254 Path : /var/ftp/pub Now we have to edit the file nfsks. package . Before making kick start file we need to check the rpm Rpm : system-config-kickstart Kick start consist of installation wizard which we can configured for another system like general information. root password.168.24 255. set the language.0. then save the kick start with any name say nfsks.0 then mentioned the FTP server address as 192.0( 19 .255.168.cfg by editing one line Selinux-disable Now we have to configure the file /etc/exports #vi /etc/exports /root 192.255.0/255.cfg under /root Suppose we use NFS type then we have to mentioned NFS Ip address : 192. network.254:/root/nfsks. keyboard type.0ES Then first mentioned your system ip address in order to identify itself in network installation type etc.255.

RPM namegenerally includes version.Red Hat Enterprise Linux 4. Like Zip-2.0ES RPM (RedHat Package Manager) RPM package contain the file and directories associated with specific application and program.i386. release and architecture for which it was build.rpm To install RPM: #rpm –i rpm_name To Remove RPM #rpm –e rpm_name In order to remove those package which has dependency #rpm –e rpm_name –nodeps Switches used with RPM -i or --install -e or --erase -U or--Upgrade -F or --Freshen we can install rpm by using #rpm –ivh rpm_name -I : Install -v : Verbose -h : Human view (Hash Sign) To Upgrade RPM: #rpm –U rpm_name To repair any corrupted rpm package #rpm –F rpm_name 20 .3-8.

To get the information about the particular rpm.5 rpm To check the rpm containing which file #rpm –ql rpm_name this command will list all the file associated with particular rpm.r3 and r4 .Red Hat Enterprise Linux 4. #rpm –qi rpm_name To Install any rpm forely #rpm –ivh rpm_name –force Installing dependent packages: Suppose we have 4 rpm’s r1. To check any rpm’s query #rpm –qa “sendmail*” To check rpm’s of related service #rpm –qa |grep bind Task Automation and Task Scheduling It is used to perform the task at particular time Two command are used a. at b. we need to install r4 but r4 depends on remaining rpm’s then we use this 21 .0ES To make any rpm query #rpm –q rpm_name To check all rpm of related pacakes #rpm –qa |grep rpm_name To check particular file associated with which rpm # rpm –qf /etc/passwd passwd file is associated with setup-2. crontab syntax: #at time at>command I at>command II ctrl+D Example: #at 10:30 at>eject at>eject –t ctrl+D Option used subhki2000@gmail.r2.

deny’ is default in system.allow’ file. It is better to use the full path of the command inside crontab instead of just the name of the command.Red Hat Enterprise Linux 4. Restriction will be provided by root login with 22 . Just save and exit form the file By default all users are allowed to use ‘at’ command. We can also make the entry as 35 10 * * * eject 36 10 * * * eject –t In this case. These two jobs will be performed at 10:35 in every month. Difference between these two method is crontab is used to perform the same task many times whereas job through ‘at’ command will be removed after the task has been performed. Once we create this file.deny inside this file we have to just mentioned the name of the user in order to restrict him not to use ‘at’ command.0ES #at now #at now+5 minutes #at now+5 hours #at now+5 days #at tomorrow #at 10:30 july 16 2006 we can also restrict the user not to use the ‘at’ command. Another method is to make an entry inside the ‘crontab’ file. We can also create a file ‘at. now by default all users will be restricted to use ‘at’ command and only that user which have entry on ‘at. ‘at. Syntax: ( By root login) #crontab –e six field are listed 1 2 minute hour command Example: 35 36 10 10 3 day of month 31 31 0-59 1-31 4 Month 5 day of Week 6 05 05 3 3 eject eject –t Minute : Hours : 0-23 Day of Month : Month : 1-12 Day of Week : 0-7 0 and 7 are Sunday #service crond restart #Whereis eject this command display the path of the command. #vi /etc/at.allow’ will allow to use the ‘at’ command. Entry will be done by the root. subhki2000@gmail.

0ES Some command which are executed with ‘at’ or ‘crontab’ send their output to the user mail box. #mutt This command will open the mailbox from where we check the output Some of the switched used with the ‘crontab’ #crontab –l List out all the job scheduled in crontab. #atq : list the job number scheduled in at #atrm jobno : to remove any job subhki2000@gmail.Red Hat Enterprise Linux 23 . #crontab –r Can remove the job from the crontab. In order to see the output of the command we use. These command are executed on background and their output is transferred to the particular user’s mail box.

ext3 /dev/hdax Where x is the number of partition that is newly created Now we mount this partition #mkdir /partx #mount –t ext3 /dev/hdax /partx Or #mount /dev/hdax /partx To mount this partition permanently make the entry in fstab #vi /etc/fstab /dev/hdax /partx ext3 defaults 12 subhki2000@gmail.0ES Fdisk: Representation of Hard disk /dev/hdx /dev/hda : Primary Master /dev/hdb : Primary Slave /dev/hdc : Secondary Master /dev/hdd : Secondary slave Fdisk command is used to create a partition #fdisk –l Display the partition Listing Creating Partition #fdisk /dev/had Press(m for help): m Some important switches are D : delete partition N : New L : listing Q : quit W : Save and Exit T : changed type Press : n l: Logical (5 or above) p: Logical partition( 1-4) Type l First cylinder (Take as default): Press Enter Last Cylinder or +size or +sizeM or +sizeK (….) : +100M Command (m for help) : w # partprobe ( to update the partition table without restarting the computer) Now we need to format the partition 24 .Red Hat Enterprise Linux 4.

There are two method of doing so a. Make the swap partition active #swapon /dev/hda9 iv. We have to create one partition of size say 200MB and change its type to 82 (swap type) .com 25 . save and exit and then run the command “partprobe” ii. first make an empty file #touch /swp ii.0ES Increasing the Size of Swap Partition There are possibilities that any time we can increase the size of RAM. to check the entry of swap partition # cat /proc/swaps If we want to make the permanent entry in fstab then #vi /etc/fstab /dev/hda9 swap swap defaults 0 0 B. Now we customize the size of the swap # dd if=/dev/zero of=/swp bs=1M count=200 iii. Creating file A. Active the swap file #swapon /swp To check the entry of swap file #cat /proc/swaps If we want that automatically this swap file activate . at that time we need to increase the size of swap partition as per the increased size of the RAM.Red Hat Enterprise Linux 4.local Make the following entry Swapon /swp Save and exit subhki2000@gmail. creating partition b. we need to make the entry in /etc/ec. Format the partition say /dev/hda9 #mkswap /dev/hda9 iii.local # vi /etc/rc. Format the newly created swap file #mkswap /swp iv. Creating file i. Creating Partition: i.

Edit the file /etc/fstab # vi /etc/fstab Search the following line “LABEL=/home /home etx3 defaults 1 2” Just add ‘usrquota’ after the word ‘defaults” as “LABEL=/home /home ext3 defaults.user will created) 26 .Red Hat Enterprise Linux 4. 3. Now check the mount quota # quotacheck –avum Where -a : Scan file system with quota enabled -v : Verbose mode -u : Scan for user quota -m : Remount file system with quota enabled 4. 3M and 4M /dev/hda2 25 3000 4000 9 0 0 Block and inode has a grace period of 7 days ( by default) We can set the quota either by setting blocks soft and hard limit of inode ( Number of maximum file created) 6.e we set the soft limit to 3000 and Hard limit to 4000 i. Now add quota for particular user # edquota –u username Output of this command File System Block soft hard inode soft hard /dev/hda2 24 0 0 9 0 0 1 block=1Kbyte Suppose we set the userquota by block size i. User quota is used to restrict the amount of disk space on each partition by each user.e. Remount the home partrition # mount –o remount /home Where –o I used to active comma separator used in fstab After given a quota we must remount the directory with user quota or if we restart the system . Steps 1.usrquota 1 2” 2.0ES User Quota: Monitoring and controlling disk space usage is another important part of a system administrator tasks. Make the quota on subhki2000@gmail. Now check the /home #cd /home #ls File aquota. it automatically remount.

com 27 .0ES # quotaon /home 7. #setquota -u username 2000 3000 20 25 /home LVM subhki2000@gmail. We can generate the quota information #repquota /home Note: We can generate the file of big size to check the quota Syntax: #dd if=/dev/zero of=bigfile bs=1M count=3 To check the quota for particular user after login #quota To set the grace period for particular user #edquota –T username To assign quota of one user to another user #edquota –p user1 user2 We can also set the quota for particular user by using following command.Red Hat Enterprise Linux 4.

Red Hat Enterprise Linux 4.0ES Logical Volume manager LVM is an extensible partitioning tool using which we can modify or resize any partition without changing our existing data. /dev/hdax Figure /dev/hdax In order to create LV ( logical volume) we need to create a partition. we need to format #mkfs.ext3 /dev/vg00/lv00 Finally we mount it on /lvm #mkdir /lvm #mount /dev/vg00/lv00 /lvm Extending the size of LVM #lvextend –L+50M /dev/vg00/lv00 After adding we need to run ext2online command in order to assign file system type to the added size #ext2online /dev/vg00/lv00 Reducing the size of LVM 28 . #fdisk /dev/had Press( m for Help): n l : logical p : Physical Type ‘l’ First Cylinder : Press Enter Last Cylinder (+sizeM or +sizeK) : +100M Command : t : t for change the type Partition no : x : x is the number of partititon Type : 8e : 8e for LVM Command : w #partprobe Now we create a Physical Volume (PV) #pvcreate /dev/hda8 Display the PV Information #pvdisplay Now we create Volume group #vgcreate Vg00 /dev/hda8 Display the Vg information #vgdisplay Finally we create a logical volume #lvcreate –n lv00 –L+50M vg00 Where -n : logical name -L: size Display the LV information #lvdisplay After creating the logical volume.

com 29 .Red Hat Enterprise Linux 4.0ES #lvreduce –L-20M /dev/vg00/lv00 If the size of the logical volume is full and we need more space to store data we need to create new partition . RAID1 and RAID 5 RAID 0 : require minimum 2 HDD and also known as stripping without parity RAID 1: require minimum 2 HDD and also known as disk mirroring subhki2000@gmail. change its type to LVM by ‘8e’ then create the physical volume and add that with volume group (vg00) #vgextend vg00 /dev/hda9 After that extend the size of logical volume In order to delete the logical volume #umount /lvm #lvremove /dev/vg00/lv00 #vgremove vg00 #pvremove /dev/hda9 #pvremove /dev/hda8 Then finally using the fdisk remove hda8 and hda9 RAID Redundant Array Of Inexpensive Disk RAID is a series of disk which can save your data even if there is catastrophic failure on one of the disk RAID are classified as RAID0.

ext3 /dev/md0 Now mount it #mkdir /raid #mount /dev/md0 /raid In order to check first we fail any one of the partition #mdadm --manage /dev/md0 --fail /dev/hda8 Check the status of the RAID #mdadm --detail /dev/md0 Removing the failure partition #mdadm --manage /dev/md0 --remove /dev/hda8 To add new disk partition #mdadm --manage /dev/md0 --add /dev/hda10 Note: In order to add new partition first we create the partition and change its type to ‘fd’ Introduction to System Service Every computer that connect to network require some IP address assign permanently to a computer host known as static IP address and some IP subhki2000@gmail.0ES RAID 5: minimum 3 HDD requirement and also known as stripping with parity First we create the two partition say each of 100MB and then change its type to (‘fd’) Raid Now we create a RAID #mdadm –C /dev/md0 –level=1 –raid-disks=2 /dev/hda8 /dev/hda9 Now check the raid #cat /proc/mdstat ‘OR’ #mdadm --detail /dev/md0 Format the newly created RAID 30 .Red Hat Enterprise Linux 4.

255.0.254 To check the IP address #ifconfig To set the IP address #netconfig Or #vi /etc/sysconfig/network Or #vi /etc/sysconfig/network-scriptd/ifcfg-eth0 Device = eth0 Boot Proto = static Onboot = yes IPaddr = 172. which are not TCP/IP services 2.0. There are 2 standard IP address 31 .2 Netmask = 255.24. service which are based on xinetd that is some back ground process services to check the service whether ON or OFF use #service service_name status #chkconfig –list #chkconfig –list service_name Example: #service nfs status #chkconfig –list #chkconfig –list nfs subhki2000@gmail.Red Hat Enterprise Linux IPv6 address have 120 bits To check the connectivity #ping 172.254. IPv6 IPv4 has a 32 bit and are in Octet-doted decimal lists Example: 192. IPv4 2.10 Introduction To System Service According to the service management.254 To make Network UP and DOWN #ifdown eth0 #ifup eth0 We can also assign temporary IP address to a LAN card.0 Gateway = 172.168. service which are managed by service command service are divided into three category 1.0ES address leased by DHCP server for a limited period of time known as dynamic IP address.24. service which are managed by init command. It will remain until we restart the computer then after that it will take IP address from ifcfg-eth0 #ifconfig eth0 172.

com 32 .Red Hat Enterprise Linux 4.0ES To Make service ON or OFF #chkconfig nfs on #chkconfig nfs off To stop the particular service for particular Run level #chkconfig –level 3 nfs off #chkconfig –level 3 5 on/off To make on or off in run level 3 and 5 #ntsysv : will start /stop all the services in a particular run level. It will display the dialog box in which all the services are mentioned DHCP Dynamic Host Configuration Protocol DHCP provides IP address to host computer dynamically by the range of addresses or statically or fixed address by MAC address Service Profile Type : Package : Daemon : Script System V managed Service dhcp dhcpd : dhcpd subhki2000@gmail.

0. Range dynamic-bootp 172.0.0.sample /etc/dhcpd. where x : Station number subhki2000@gmail. Option nis-domain : “RHCE”.24.24.conf Set the following configuration host stationX { hardware Ethernet 00:34:e3:5r:q1: File Port : : /etc/dhcpd.68 First check the rpm #rpm –q dhcp Copy and rename dhcpd. Option domain-name : “example. Option domain-name-server : 172. fixd-address 33 .conf Set the following configuration Subnet : 172.Red Hat Enterprise Linux 4.24.conf in /etc #cp /usr/share/doc/dhcp-3.conf.54.24.1/dhcpd.0.sample to dhcpd.conf.conf 67.24.1”. Option router : 172.0.0. Option subnet-mask : 255.255.255. Netmask : 255.10 Save and exit Start the service #service dhcpd restart #service portmap retstart #chkconfig dhcpd on #chkconfig portmap on Client Side #dhclient Dhclient is used to give the request to dhcp server to assign an address to client Now if we want to assign the static IP address by their MAC address #vi /etv/dhcpd.conf Now open file #vi /etc/dhcpd.0.0. 34 . rpc.nfsd : nfs 2048 : /etc/exports subhki2000@gmail.statd.Red Hat Enterprise Linux 4.0ES NFS Network File System NFS server is used for file sharing and directory sharing between linux to linux machine Service Profile Type : Package : Daemon : Script Port : Configuration File Check the rpm # rpm –q nfs-utils System V-managed nfs-utils rpc.

0(rw.0(rw.255. then it will mount for everyone subhki2000@gmail.254:/share /mnt Where /mnt is a mount point For sharing particular IP address Server: #vi /etc/exports /share 172.sync).sync) /share To check #showmount –e 35 .sync) For all world #vi /etc/exports /share *(rw.0.255.sync) /share 172.0/255.0.sync) For two different network #vi /etc/exports /share If we give a space between the network and (rw.24.254 #showmount –e server1 Client Mount the /share directory on client machine #mount –t nfs:172.0.sync) Save and exit /share will be shared by the entire network Start the service #service portmap restart #chkconfig portmap on #service nfs restart #chkconfig nfs on Note: We need to restart the service portmap before nfs service in order to assign port number. Hat Enterprise Linux 4.3/ Server Setting First make the folder which you want to share #mkdir /share #cd /share #touch a d f #chmod o+w a b Now open the configuration file #vi /etc/exports Make the following entry /share 172.4/255.0/255.0(rw.24.0/

NIS server is used to manage the system and account information on multiple system from the central server. yppasswdd : /etc/sysconfig/network /var/yp/Makefile tools ypbind Daemon Script Configuration Server Setting: : 36 .0 (rw.0.0. NIS Network Information Service NIS provide simple directory service for system and account information.ypserv rpc.yppasswddd : ypserv.24.sync) If we give no permission then it will take (ro.0/255.255.0ES #vi /etc/exports /share 172.sync) #export –r #export –a #export –ar If we run this command then there is no need to restart portmap and nfs again and again. Service Profile Type Package : : system V manage Server Portmap ypserv make Client Authconfig authconfig-gtk portmap yprpc.Red Hat Enterprise Linux 4.

24.0(rw. Edit the file #vi /etc/sysconfig/network Define the following line NISDOMAIN=ICON Save and exit 3.255.0/ 37 . start the service #service portmap restart #chkconfig portmap on #service nfs restart #chkconfig nfs on #service yppasswdd restart #chkconfig yppasswdd on 172.0ES Steps 1. Now create a user with home directory /rhome/nisuserX #mkdir /rhome #adduser –d /rhome/nisuser1 nisuser1 #passwd nisuser1 7. Start the service #service portmap restart #chkconfig portmap on #service ypserv restart #chkconfig ypserv on 5. Edit the file #vi /var/yp/Makefile Search for “/all: “ line Remove all the entry except all: passwd group hosts netid save and exit 4. Make the entry of the home directory of user in /etc/exports file #vi /etc/exports /rhome/nisuser1 Save and exit 8. Check the rpm’s #rpm –q portmap ypserv make 2.0.Red Hat Enterprise Linux 4.0.sync) subhki2000@gmail. Now create a database for NIS server # /usr/lib/yp/ypinit –m -m : Master 6.

misc” #vi /etc/auto. Run the command #authconfig Or #system-config-authentication In this enable and write the following option “Enable NIS option” and Press F12 In NIS Setting Domain : ICON Server : 172.intr 172.254.254:/rhome/nisuser1 Save and exit 38 .misc --timeout=60 This file define the path of the home directory #vi /etc/auto.254. Check the rpm’s #rpm –q portmap authconfig authconfig-gtk yp-tools ypbind 2. Edit Two File “auto.soft.misc Nisuser1 -rw. Finally login with user as “nisuser1” and passwd subhki2000@gmail. Start the service #service autofs restart #chkconfig autofs on 5.master /rhome /etc/auto.Red Hat Enterprise Linux 4.24.0ES 9. Run the following command to check the password #ypcat passwd #getent passwd ypcat will display the entry of server user information getent will display the entry of local and server user information 6.24.254 3. Finally Update the database #cd /var/yp #make Client Setting: 1.master” and “auto.

53 (TCP) Server Setting /var/named/chroot/var/named/* Port : 52 (UDP). caching-nameserver. File “example.0ES DNS Domain Name Server DNS translate IP address to hostname or vise versa Service Profile Type : System V manage Package : bind. bindutils Daemon : named Script : named Configuration file : /var/named/chroot/etc/named.”{ Type master. Allow-update {none.conf Edit the line after copying line N 37 to line 47 Zone “example. Edit the file named. Zone “”. }”IN{ Type 39 .conf #vi /var/named/chroot/etc/named. subhki2000@gmail.Red Hat Enterprise Linux 4.} .

example. ……….com ( ………… ………… ………… … }. ……) @ IN NS server1.0ES File “example.24. Edit example. 2. Server1 IN A 172.254 Station1 IN A root. ……….local file #vi example.24. Start the service subhki2000@gmail.3 Station4 IN A 172.example.) @ IN NS server1.server1.0 IN PTR station1.254 IN PTR server1.0.0 IN PTR station3.0 IN PTR station2. Note: Like this we can make entry all the stations connected to that network Save and exit 4.Red Hat Enterprise Linux 4.0. 2. 254.1 Station2 IN A 172.example.24.local #cp named. ( ………. example.example. 4. Now Enter inside the following directory #cd /var/named/chroot/var/named Make two file by copying #cp localhost. Allow-update {none.4 www IN CNAME server1 www1 IN CNAME station1 www2 IN CNAME station2 www3 IN CNAME station3 www4 IN CNAME station4 save and exit 5.}.zone $TTL 86400 @ IN SOA server1.local”. Edit the file 40 .local $TTL 86400 @ IN SOA Station3 IN A

254.conf Nameserver 172.example. It identifies the name server as the authoritative source for information about this domain TTL indicate how long to hold the data in their cache NS shows the name of name server A shows the IP address for name server MX is a mail Exchange record PTR is used to point to the name server CNAME is CONONICAL name shows the real name of the host subhki2000@gmail.24. Dig the server #dig server1.example.254 7. Check the file /etc/hosts file DNS Client Open the file and check the setting #vi /etc/ #nslookup #nslookup server1.254 Search 41 .com Savce and exit Now finally use the Dig and nslookup command to check the DNS from client side Term IN : Internet SOA : Start Of Authority TTL : Time to Line NS : Name server A : Address Record PTR : Pointer Record MX : Mail server SOA is the first line in the zone file.Red Hat Enterprise Linux #service named restart #chkconfig named on 6.

Red Hat Enterprise Linux 4.0. Edit the file squid.0 Line number 1865 http-access allow icon In order to deny we write http-access deny aclname Like : : : : System V manage Squid Squid : Squid : /etc/squid/ 42 .conf 8080 .conf #vi /etc/squid/squid. 3128 subhki2000@gmail. Check the rpm’s #rpm –q squid 2.24.conf Line number 54 http-port 8080 Line number 481 cache-mem 100MB Line number 1805 (syntax : acl acl_name acl_type network or domain) acl icon src 172.0ES Squid Proxy Server Proxy server is used for Internet Sharing Server Profile Type Package Daemon Script Configuration Port No Steps

hotmail. Click editPreferences 3. Click on “Connection Setting” 4. Select “ Manual Proxy Configuration” Http Proxy : 43 .254 Port 8080 subhki2000@gmail.0ES http-access deny icon If we want to restrict any site Syntax : acl aclname acltype Name or domain Example: acl icon1 dstdomain .com Start the service #service squid restart #chkkconfig squid on Client Side: 1.24. Click on Mozilla Web Browser 2.Red Hat Enterprise Linux 4.254.

example.) Disable this line by adding dnl# /etc/mail/access /etc/aliases Steps: file through sendmail.0. m4 sendmail 25 : /etc/mail/ 44 . mutt .example.Red Hat Enterprise Linux #m4 /etc/mail/ After editing this DISCARD OK : Allow REJECT : restrict and message reply will come DISCARD : restrict and message reply will not come 4. sendmail-cf.rakesh.24 OK 172.root@station6. In order to allow / restrict other network or client or any user to send mail we edit file /etc/mail/access #vi /etc/mail/access 172.4 REJECT root@station6. Start the Service subhki2000@gmail.24. Service Profile Type : Package : Daemon : Port : Configuration File System V manage sendmail. Now create a new sendmail.0ES Send Mail Sendmail is used to configure the mail server on the server in order to send and receive the > /etc/mail/sendmail. In order to redirect the mail of any user to another we edit #vi /etc/aliases Root : raj. procmail. Edit the file sendmail. we need to run the ‘newaliases command to update the file #newaliases /etc/mail/ Line number 105 DAEMON-OPTION(……………………….

Type the following command #printconfig Or #system-config-printer Assign Queue name : xyz Device name : IPP Select Printer Driver “ raw printer queue” Server : server1. To check status with job number #lpstat subhki2000@gmail. To check the mail #mutt If any problem come that /var/spool/mail/root does not exits then create a file by #touch /var/spool/mail/root CUPS Common Unix Printer System UPS is the primary printing system under Re Hat Enterprise Linux.example.0ES #service sendmail restart #chkconfig sendmail on Path for the Queue Directory : /printer/xyz And finish the Wizard 2.1 Configuration Steps: 1. based on HTTP/1.Red Hat Enterprise Linux 4. CUPS support a new Internet Printing Protocol (IPP).com 45 . Check the status of the Queue #lpq 3. To Print any file #lp <filename> #lpr <filename> 4. To remove any job #lprm job_number Or #cancel job_number 5.

Anonymous Access b. User Access A In Anonymous access client machine can connect to target machine via users FTP and anonymous. In this case we don’t require password. linux to Unix and Linux to Windows Service Profile Type : Package : Daemon : Script Configuration File Port : System V manage vsftpd vsftpd vsftpd /etc/vsftpd/vsftpd. client machine connect to Target machine by having username and password on Target machine For anonymous user FTP working directory is ‘/’ / = /var/ftp We can also provide user level security We have two files #vi /etc/vsftpd.Red Hat Enterprise Linux 46 .ftpuser #vi /etc/vsftpd. By default these users have only permission to download (get) B In user access.user_list User entry in these two file are not allowed to access ‘ftp’ If we want that user entry in vsftpd.conf Add following line Userlist-deny = No In order to assign upload permission to ftp and anonymous users subhki2000@gmail.0ES FTP: File Transfer Protocol FTP provides file sharing between linux to linux .conf #vi /etc/vsftpd/vsftpd.conf 21 : : FTP service provide two level of access a.user_list can only access ftp server then we need a entry in vsftpd.

254.conf Anonymous-enable = yes #uncomment line 27 Anon-upload-enable = yes #uncomment Chown-uploads = yes Chown-username = daemon Now create a directory inside /var/ftp #mkdir upload #chmod 777 upload Chgrp ftp upload Assign group owner ship to ftp to ‘upload’ directory Start the Service #service vsftpd restart Access FTP #ftp 172.254.254 For Anonymous user Username = ftp Password =`press Enter` For User Access Username = rakesh Password = ***** In Graphical ftp://rakesh@172.24.254 To upload: put To download : get Example: #put <filename> to upload any file in user home directory #get <filename. To download any file from user home directory We can also open ftp server as #elinks ftp://172.254 47 .0ES #vi /etc/vsftpd/vsftpd.254.Red Hat Enterprise Linux 4. 48 .conf Configuration File : Steps: 1. Service Profile Type Daemon Script Port Package : : : : : System V Manage httpd httpd 80 httpd.html Now start the service #service httpd restart #service portmap restart #chkconfig httpd on #chkconfig portmap on Now dig the site #dig </VirtualHost> Save and exit Now create a directory #mkdir /www #cd /www #vi index.254:80> ServerAdmin Restriction For User to Access Web site #vi /etc/httpd/conf/httpd. With the help of Apache we can host multiple Website.24.24.254. 1022 and paste at last <VirtualHost 172.Red Hat Enterprise Linux 4.0ES APACHE WEB SERVER Apache Web Server is used for Web Hosting. portmap /etc/httpd/conf/ DocumentRoot /www ServerName server1. For multiple Hosting we need to uncomment line number 1003 NameVirtualHost 172.conf <VirtualHost 172.254.example.254:80> ServerAdmin root@server1.254:80 Now copy line No 1016 to #elinks http://server1. Check the rpm #rpm –q httpd 2.

Red Hat Enterprise Linux Open SSH Server SSH or Secure Shell is used for the purpose of remote login between linux to linux and linux to Unix.0ES DocumentRoot /www ServerName Server1.htaccess AuthName “allow users” AuthType Basic AuthUserFile /etc/httpd/ <Directory /www> Option Indexes Includes AllowOverride Authconfig </Directory> </VirtualHost> Now create one file .com 49 .access raj #chgrp apache /etc/httpd/ht.example.example. subhki2000@gmail.access Require valid-user Save and Exit Now create one user #adduser raj #htpasswd –c /etc/httpd/ht. The mail difference between SSH and telnet is that SSH can be used for file transfer.htaccess in /www #vi /www/.access Start the Service #service httpd restart #chkconfig httpd on #elinks http://server1.

254. opensshsshd 22 : : sshd /etc/ssh/sshd-config If you want root should not login then #vi /etc/ssh/sshd-config Line PermitRootLogin No Uncomment line number 13 and 14 Port 22 Protocol 2.254:/root/install. Hat Enterprise Linux 4.254 ( by User) #ssh 172.24.0ES Service Profile Type : Package : client Daemon : Port : Script Configuration File System V manage open ssh.254 (By root) If you want to display any welcome Note at the time of connecting #Banner Banner /etc/banner If you want to copy file from ssh server to client #scp 172.24.6 init 6 Or Slogin command can also be used Samba Samba can be used to share file and printer between linux to 50 .254:/root Remote shut down #ssh 172. linux to Unix and Linux to windows Service Profile Type : System V Manage subhki2000@gmail.1 Save and exit Start the service #service sshd restart #chkconfig sshd on #ssh raj@172.24. open ssh-server.254.log /mnt If you want to directory #scp –r 172.cfg 172.254:/root/raj /mnt If you want to copy file from client machine to ssh server #scp /root/anaconda-ks.24.254.254.

we can’t use a computer with two network interface to route between two or more subnet.0.conf #vi /etc/samba/smb.24.254.254. To check type #cat /proc/sys/net/ipv4/ip-forward If forwarding is enabled. To be able to do this we need to make sure that we enable IP forwarding.254/raj –U raj GUI Smb://172. the number 0 is returned. subhki2000@gmail. If forwarding is not enabled. nmbd smb 167.Red Hat Enterprise Linux 4.254/255. samba-common. samba-client smbd.24.0 Then copy last 8 line [raj] Path = /data Valid users = raj rakesh Public = no Writeable = yes Browse able = yes Save and exit Now create a Users #adduser raj #adduser rakesh #smbpasswd –a raj #smbpasswd –a rakesh Start the service #service smb restart #chkconfig smb on On client side #smbclient //172.254 Mounting share folder #smbmount //172.24. the number 1 is returned.conf Workgroup = CORP Server String = Samba Host allow = 172.254/data /mnt –o username=rakesh IP Forwarding In Linux.24.169 /etc/samba/smb. We should make sure that module is loaded.255.0ES Package : Daemon : Script : Port : Configuration file : /etc/samba/smbpasswd 51 .254.conf Edit the file smb.254.168.

24. there are three type of security policies 1.254.7 Net.0 172.deny By default all are allowed subhki2000@gmail. security provided by TCP wrappers 3. Hosts.254.255. security provided by xinetd TCP Wrappers Configuration needed two file a.254 172.conf Line no.254.allow b.0 172.25. Hosts.24.254 : 172.254.254 : 255.254 (-d : virtual) = 1 Save and exit To activate permanently #sysctl –p Or another method is #echo 1 >/proc/sys/net/ip_forward This work for temporary use till system is ‘ON’ Now for the first network #netconfig IP address : Subnet Default Gateway : Primary server Second network #netconfig –d eth0:1 IP Address Subnet Default Gateway Primary Server 172.24.254 : : : Security Policies According to the service management.254 : 52 .Red Hat Enterprise Linux 4.0. Security within a service 2.ipv4.25.0ES To enable IP forwarding #vi /etc/sysctl.

0 In this case just make entry in allowed to use telnet service #vi /etc/ 53 .0/255.allow Sshd : 172. IMAP.deny #vi /etc/hosts.0.0.1 Some of the daemon are Imapd Ipop3d Smbd.2 allowed to use SSH service #vi /etc/hosts. 172.1 172.0/55.0.0/255.0. and POP3 Example 3: Network 172.0 and deny outside network ( .0.0.0/255.0.0ES Check the rpm #rpm –q tcp_wrappers Syntax Daemon_list : client_list Example 1: Network #vi /etc/hosts.0.0/ to use ssh service and disallowing all other network #vi /etc/hosts.Red Hat Enterprise Linux 4.25.24. redhat.telnetd : .deny Vsftpd: 172.0.0 Similarly we can make entry for SSH.26.0 In order to deny other network Vsftpd: ALL Deny other network except 172.deny Vsftpd: 172.24.example.24. Example 5: Allowing Example 4: Network Or we can assign station wise In.0. nmbd subhki2000@gmail.255.allow Vsftpd: Example 2 : allowing 172.255.0 except 172.example.2 EXCEPT 172.deny Vsftpd: ALL EXCEPT #vi /etc/hosts. are not allowed to use ftp service #vi /etc/hosts.25.telnetd : station1.0.0/ In.deny Sshd : ALL EXCEPT 172.

3.0.{1.6 Save and exit By default all node in a network can access through telnet 2.24.0ES Telnet Telnet service is used for the purpose of remote login between linux to linux.d/telnet Check the rpm #rpm –q telnet-server telnet Edit the file #vi /etc/xinetd. For range of node #vi /etc/xinetd/telnet Only_from = 172.6 Time setting #vi /etc/xinetd/telnet Acees_time = 04:15=04:30 If we want to login with username as root and by default we cannot #vi /etc/securetty Add two line Pts/0 Pls/1 subhki2000@gmail. Deny particular node #vi /etc/xinetd/telnet No_access = 172.d/telnet Make Disable = no Save and exit Start the service #service xinetd restart #chkconfig xinetd on Security setting 1. For particular system #vi /etc/xinetd. linux to unix and linux to windows Service Profile Type Package Daemon Script Configuration : : : : xinetd 54 .0.4} 3. telnet based on xinetd based on xinetd : /etc/xinetd.0.Red Hat Enterprise Linux 4.24.2.d/telnet Only_from = 172.

24.0/255.0/ 55 .0ES Configuration of POP3 and IMAP IMAP is used for the authentication and POP3 is used for mailing We need to configure #vi /etc/dovecot. 14 Protocols = imap imaps pop3 pop3s Save and exit Start the service #service dovecot restart #chkconfig dovecot on #chkconfig xinetd on Now in order to provide security Allowing local network to access the pop3 and imap and disallowing other #vi /etc/hosts. #vi /etc/hosts.Red Hat Enterprise Linux 4.255.0.allow Ipop3d : 172.0.0 Imapd : 172.conf Uncomment line No.deny Ipop3d : ALL subhki2000@gmail.

station name f.Red Hat Enterprise Linux 4.25. we can’t recover files after this #shred /dev/hda UMask User Mask Default value for root = 0022 Default value for users = 0002 When we create any new file. email address after making all those entry we need to copy this file #cp dovecot. in this case Umask means 666-002 = 664 for normal user and for the root the default value will be 666-022=644 subhki2000@gmail. state c.0.0.0ES Imapd : ALL These permission are set when host from local network can access pop3 and imap and hosts from other network does’nt allow In order to disallow outside network say 172. country b.pem /usr/share/ssl/private/dovecot.0/255. company and unit name e. street d.0.255.0.pem #make dovecot.0 Imapd : 172. Check for devecot. The default value will be 666.pem Low Level Format The command ‘shred’ is used for low level format 25 56 .0/255.0 Ipop3d : 172.pem file in #cd /usr/share/ssl/certs #rm dovecot.0 To check the status #nmap stationx Or #namp localhost Digital Certification Certificate is used for the purpose of authentication Steps 1.pem In this we have to make the following entries a.25.25.pem Overwrite : yes To check the status or entry #openssl x509 –noout-subject </usr/share/ssl/private/dovecot.0.255.

conf Default = 0 Timeout = 5 Splash image=(hd0. GRUB. It is the default boot loader used by Red Hat Linux Grub. the default value 777-022 = 755 Some Important File Settings: 1.0ES The default value for a directory is 777.CONF GRUB stands for GRand Unified Bootloader.Red Hat Enterprise Linux 4.0) Kernel /vmlinuz-2.0)/grub/splash.9-5.gz Hidden menu Title Redhat Linux Root (hd0.6. Inittab found in /etc/inittab #vi /etc/inittab 57 .conf and its symbolic links found in /etc/grub.6.EL ro root=LABEL=/ rhgb quiet Initrd /initrd-2. INITTAB FILE Run level setting are done in inittab file.9-5.conf file found in /boot/grub/grub.conf #vi /etc/grub.EL.xpm. in this case umask means that whenever we create new directory.img 2. the default valkue for normal user 777002 = 775 and for root.

d/rc 2 l3:3:wait:/etc/rc.Red Hat Enterprise Linux 4.conf Copy that password line from the bottom most and paste it bellow hidden menu option as Password –md5 <password> Save and exit subhki2000@gmail.conf Enter two times the password In this case the password will be encrypted and directed (>>) to file grub.sysinit l0:0:wait:/etc/rc.d/rc 4 l5:5:wait:/etc/ 58 .conf Now open file #vi /etc/grub. Method II: Encrypted form #grub-md5-crypt >>/etc/grub.d/rc 5 l6:6:wait:/etc/rc.d/rc 3 l4:4:wait:/etc/rc.conf Below Hiddenmenu Password = redhat This password is not in encrypted form.d/rc 6 ca::ctrlaltdel:/sbin/shutdown –t3 –r now * 1:2345:respawn:/sbin/mingetty tty1 2:2345:respawn:/sbin/mingetty tty2 3:2345:respawn:/sbin/mingetty tty3 4:2345:respawn:/sbin/mingetty tty4 5:2345:respawn:/sbin/mingetty tty5 6:2345:respawn:/sbin/mingetty tty6 X:5:respawn:/etc/x11/prefdm –nodaemon Setting Grub Password Two method are used to set grub password Method I: #vi /etc/grub.0ES id:5:initdefault: si::sysinit:/etc/rc.d/rc 0 l1:1:wait:/etc/rc.d/rc.d/rc 1 l2:2:wait:/etc/rc.

Sign up to vote on this title
UsefulNot useful

Master Your Semester with Scribd & The New York Times

Special offer: Get 4 months of Scribd and The New York Times for just $1.87 per week!

Master Your Semester with a Special Offer from Scribd & The New York Times