최신 EX200 무료덤프 - RedHat Red Hat Certified System Administrator - RHCSA
Configure autofs.
Configure the autofs automatically mount to the home directory of LDAP, as required:
server.domain11.example.com use NFS to share the home to your system. This file system contains a pre configured home directory of user ldapuserX.
Home directory of ldapuserX is:
server.domain11.example.com /home/guests/ldapuser
Home directory of ldapuserX should automatically mount to the ldapuserX of the local /home/guests Home directory's write permissions must be available for users ldapuser1's password is password
Configure the autofs automatically mount to the home directory of LDAP, as required:
server.domain11.example.com use NFS to share the home to your system. This file system contains a pre configured home directory of user ldapuserX.
Home directory of ldapuserX is:
server.domain11.example.com /home/guests/ldapuser
Home directory of ldapuserX should automatically mount to the ldapuserX of the local /home/guests Home directory's write permissions must be available for users ldapuser1's password is password
정답:
yum install -y autofs
mkdir /home/rehome
/etc/auto.master
/home/rehome/etc/auto.ldap
Keep then exit
cp /etc/auto.misc /etc/auto.ldap
/etc/auto.ldap
ldapuserX -fstype=nfs,rw server.domain11.example.com:/home/guests/
Keep then exit
systemctl start autofs
systemctl enable autofs
su - ldapuserX// test
If the above solutions cannot create files or the command prompt is -bash-4.2$, it maybe exist multi-level directory, this needs to change the server.domain11.example.com:/home/guests/ to server.domain11.example.com:/home/guests/ldapuserX. What is multi-level directory? It means there is a directory of ldapuserX under the /home/guests/ldapuserX in the questions. This directory is the real directory.
mkdir /home/rehome
/etc/auto.master
/home/rehome/etc/auto.ldap
Keep then exit
cp /etc/auto.misc /etc/auto.ldap
/etc/auto.ldap
ldapuserX -fstype=nfs,rw server.domain11.example.com:/home/guests/
Keep then exit
systemctl start autofs
systemctl enable autofs
su - ldapuserX// test
If the above solutions cannot create files or the command prompt is -bash-4.2$, it maybe exist multi-level directory, this needs to change the server.domain11.example.com:/home/guests/ to server.domain11.example.com:/home/guests/ldapuserX. What is multi-level directory? It means there is a directory of ldapuserX under the /home/guests/ldapuserX in the questions. This directory is the real directory.
We are working on /data initially the size is 2GB. The /dev/test0/lvtestvolume is mount on /dat a. Now you required more space on /data but you already added all disks belong to physical volume. You saw that you have unallocated space around 5 GB on your harddisk. Increase the size of lvtestvolume by 5GB.
정답:
Create a partition having size 5 GB and change the syste id '8e'.
use partprobe command
pvcreate /dev/hda9 Suppose your partition number is hda9.
vgextend test0 /dev/hda9 vgextend command add the physical disk on volume group.
lvextend -L+5120M /dev/test0/lvtestvolume
verify using lvdisplay /dev/test0/lvtestvolume.
use partprobe command
pvcreate /dev/hda9 Suppose your partition number is hda9.
vgextend test0 /dev/hda9 vgextend command add the physical disk on volume group.
lvextend -L+5120M /dev/test0/lvtestvolume
verify using lvdisplay /dev/test0/lvtestvolume.
Create a logical volume
Create a new logical volume as required:
Name the logical volume as database, belongs to datastore of the volume group, size is 50 PE.
Expansion size of each volume in volume group datastore is 16MB.
Use ext3 to format this new logical volume, this logical volume should automatically mount to /mnt/database
Create a new logical volume as required:
Name the logical volume as database, belongs to datastore of the volume group, size is 50 PE.
Expansion size of each volume in volume group datastore is 16MB.
Use ext3 to format this new logical volume, this logical volume should automatically mount to /mnt/database
정답:
fdisk -cu /dev/vda// Create a 1G partition, modified when needed
partx -a /dev/vda
pvcreate /dev/vdax
vgcreate datastore /dev/vdax -s 16M
lvcreate- l 50 -n database datastore
mkfs.ext3 /dev/datastore/database
mkdir /mnt/database
mount /dev/datastore/database /mnt/database/ df -Th
vi /etc/fstab
/dev/datastore /database /mnt/database/ ext3 defaults 0 0 mount -a
Restart and check all the questions requirements.
partx -a /dev/vda
pvcreate /dev/vdax
vgcreate datastore /dev/vdax -s 16M
lvcreate- l 50 -n database datastore
mkfs.ext3 /dev/datastore/database
mkdir /mnt/database
mount /dev/datastore/database /mnt/database/ df -Th
vi /etc/fstab
/dev/datastore /database /mnt/database/ ext3 defaults 0 0 mount -a
Restart and check all the questions requirements.
Create a Collaborative Directory
Create a shared directory /home/managers with the following characteristics:
- The group ownership of /home/managers is sysmgrs.
- The directory should be readable, writable, and executable by members of the sysmgrs group, but should not have read or write permissions for any other users (of course, the root user has access to all files and folders).
- Any files created within /home/managers should automatically inherit the group ownership set to the sysmgrs group.
Create a shared directory /home/managers with the following characteristics:
- The group ownership of /home/managers is sysmgrs.
- The directory should be readable, writable, and executable by members of the sysmgrs group, but should not have read or write permissions for any other users (of course, the root user has access to all files and folders).
- Any files created within /home/managers should automatically inherit the group ownership set to the sysmgrs group.
정답:
[root@node1 ~]# mkdir /home/managers
[root@node1 ~]# chgrp sysmgrs /home/managers
[root@node1 ~]# chmod 2770 /home/managers
# Verification
[root@node1 ~]# ll -d /home/managers
[root@node1 ~]# chgrp sysmgrs /home/managers
[root@node1 ~]# chmod 2770 /home/managers
# Verification
[root@node1 ~]# ll -d /home/managers
Configure your web services, download from http://instructor.example.com/pub/serverX.html And the services must be still running after system rebooting.
정답:
cd /var/www/html
wget http://instructor.example.com/pub/serverX.html mv serverX.html index.html /etc/init.d/httpd restart chkconfig httpd on
wget http://instructor.example.com/pub/serverX.html mv serverX.html index.html /etc/init.d/httpd restart chkconfig httpd on
Configure a task: plan to run echo "file" command at 14:23 every day.
정답:
(a) Created as administrator
# crontab -u natasha -e
23 14 * * * /bin/echo "file"
(b)Created as natasha
# su - natasha
$ crontab -e
23 14 * * * /bin/echo "file"
# crontab -u natasha -e
23 14 * * * /bin/echo "file"
(b)Created as natasha
# su - natasha
$ crontab -e
23 14 * * * /bin/echo "file"
Configure the permissions of /var/tmp/fstab
Copy the file /etc/fstab to /var/tmp/fstab. Configure the permissions of /var/tmp/fstab so that:
the file /var/tmp/fstab is owned by the root user.
the file /var/tmp/fstab belongs to the group root.
the file /var/tmp/fstab should not be executable by anyone.
the user natasha is able to read and write /var/tmp/fstab.
the user harry can neither write nor read /var/tmp/fstab.
all other users (current or future) have the ability to read /var/tmp/fstab.
Copy the file /etc/fstab to /var/tmp/fstab. Configure the permissions of /var/tmp/fstab so that:
the file /var/tmp/fstab is owned by the root user.
the file /var/tmp/fstab belongs to the group root.
the file /var/tmp/fstab should not be executable by anyone.
the user natasha is able to read and write /var/tmp/fstab.
the user harry can neither write nor read /var/tmp/fstab.
all other users (current or future) have the ability to read /var/tmp/fstab.
정답:
cp -a /etc/fstab /var/tmp
cd /var/tmp
ls -l
getfacl /var/tmp/fstab
chmod ugo-x /var/tmp/fstab
[ No need to do this, there won't be execute permission for the file by default]
# setfacl -m u:natasha:rw /var/tmp/fstab # setfacl -m u:harry:0 /var/tmp/fstab(zero)
[Read permission will be there for all the users, by default. Check it using ls -l /var/tmp/fstab] Verify by
[ ls -la /var/tmp/fstab]
cd /var/tmp
ls -l
getfacl /var/tmp/fstab
chmod ugo-x /var/tmp/fstab
[ No need to do this, there won't be execute permission for the file by default]
# setfacl -m u:natasha:rw /var/tmp/fstab # setfacl -m u:harry:0 /var/tmp/fstab(zero)
[Read permission will be there for all the users, by default. Check it using ls -l /var/tmp/fstab] Verify by
[ ls -la /var/tmp/fstab]
Open kmcrl value of 5 , and can verify in /proc/ cmdline
정답:
# vim /boot/grub/grub.conf
kernel/vmlinuz-2.6.32-71.el6.x86_64 ro root=/dev/mapper/GLSvg-GLSrootrd_LVM_LV=GLSvg/GLSroot rd_LVM_LV=GLSvg/GLSswaprd_NO_LUKSrd_NO_MDrd_NO_DM LANG=en_US.UTF-8 SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=us crashkernel=auto rhgb quiet kmcrl=5 Restart to take effect and verification:
# cat /proc/cmdline
ro root=/dev/mapper/GLSvg-GLSroot rd_LVM_LV=GLSvg/GLSroot rd_LVM_LV=GLSvg/GLSswap rd_NO_LUKS rd_NO_MD rd_NO_DM LANG=en_US.UTF-8 SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=us rhgb quiet kmcrl=5
kernel/vmlinuz-2.6.32-71.el6.x86_64 ro root=/dev/mapper/GLSvg-GLSrootrd_LVM_LV=GLSvg/GLSroot rd_LVM_LV=GLSvg/GLSswaprd_NO_LUKSrd_NO_MDrd_NO_DM LANG=en_US.UTF-8 SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=us crashkernel=auto rhgb quiet kmcrl=5 Restart to take effect and verification:
# cat /proc/cmdline
ro root=/dev/mapper/GLSvg-GLSroot rd_LVM_LV=GLSvg/GLSroot rd_LVM_LV=GLSvg/GLSswap rd_NO_LUKS rd_NO_MD rd_NO_DM LANG=en_US.UTF-8 SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=us rhgb quiet kmcrl=5
There is a server having 172.24.254.254 and 172.25.254.254. Your System lies on 172.24.0.0/16. Make successfully ping to 172.25.254.254 by Assigning following IP: 172.24.0.x where x is your station number.
정답:
Use netconfig command
Enter the IP Address as given station number by your examiner: example: 172.24.0.1 Enter Subnet Mask Enter Default Gateway and primary name server press on ok ifdown eth0 ifup eth0 verify using ifconfig In the lab server is playing the role of router, IP forwarding is enabled. Just set the Correct IP and gateway, you can ping to 172.25.254.254.
Enter the IP Address as given station number by your examiner: example: 172.24.0.1 Enter Subnet Mask Enter Default Gateway and primary name server press on ok ifdown eth0 ifup eth0 verify using ifconfig In the lab server is playing the role of router, IP forwarding is enabled. Just set the Correct IP and gateway, you can ping to 172.25.254.254.
Configure iptables, there are two domains in the network, the address of local domain is 172.24.0.0/16 other domain is 172.25.0.0/16, now refuse domain 172.25.0.0/16 to access the server.
정답:
below
iptables -F
service iptables save
iptables -A INPUT -s 172.25.0.0/16 -j REJECT
service iptables save
service iptables restart
iptables -F
service iptables save
iptables -A INPUT -s 172.25.0.0/16 -j REJECT
service iptables save
service iptables restart