RH302 RHCE (Redhat Certified Engineer) Questions and Answers

By default user1 can remove user2’s files due to directory permission to group member. We can prevent of deleting files from others users using Sticky Bits.

chmod o+t /data

Verify /data: ls -ld /data

You will get: drwxrwx—T

When root unable to login into the system think:

1. Is password correct?

2. Is account expired?

3. Is terminal Blocked?

Do these Steps:

Boot the System on Single user mode.

Change the password

Check the account expire date by using chage –l root command.

If account is expired, set net expire date: chage –E “NEVER” root

Check the file /etc/securettyWhich file blocked to root login from certain terminal.

If terminal is deleted or commented write new or uncomment.

Reboot the system and login as a root.

Do the following steps as:

vi /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE=eth0

BOOTPROTO=static

ONBOOT=yes

IPADDR=x.x.x.x

NETMASK=x.x.x.x

Enter the IP Address as given station number by your examiner: example: 172.24.0.1

Enter Subnet Mask

Enter Default Gateway and primary name server

press on ok

ifdown eth0

ifup eth0

verify using ifconfig

In the lab server is playing the role of router, IP forwarding is enabled. Just set the Correct IP and gateway, you can ping to 172.25.254.254.

Do the following steps as:

Use fdisk /dev/hdaTo create new partition.

Type nFor New partitions

It will ask for Logical or Primary Partitions. Press l for logical.

It will ask for the Starting Cylinder: Use the Default by pressing Enter Key.

Type the Size: +100MYou can Specify either Last cylinder of Size here.

Press P to verify the partitions lists and remember the partitions name.

Press w to write on partitions table.

Either Reboot or use partprobe command.

Use mkfs –t ext3 /dev/hda?

Or

mke2fs –j /dev/hda? To create ext3 filesystem.

vi /etc/fstab

Write:

/dev/hda?/dataext3defaults1 2

11. Verify by mounting on current Sessions also:

mount /dev/hda? /data

To automatically mount at boot time we use the /etc/fstab file. Because /etc/rc.d/rc.sysinit file reads and mount all file system specified in /etc/fstab. To mount Network Sharing Files also use the /etc/fstab but filesystem is nfs.

vi /etc/fstab

192.168.0.254:/data/commonnfsdefaults0 0

reboot the system.

Maintenance mode also known as emergency mode. System boots on emergency mode when file system error occurred. It is due to unknown partition, bad filesystem specified in /etc/fstab. To slove follow the steps

Give the Root password

fdisk –lVerify the Number of parations.

Identify the Root partition, e2label /dev/hda1, e2label /dev/hda2…..

Remount the root partation on rw mode: mount –o remount,defaults /dev/hda6 /

vi /etc/fstab

Correct all partitions, mount point, mount options, file system etc.

6.Press ctrl+d

Do the following steps as:

Boot the system in Single user mode

Use the passwd command

Do the following steps as:

1.vi /etc/security/access.conf

-:john:LOCAL

2.vi /etc/pam.d/system-auth

accountrequired/lib/security/pam_access.so

/etc/security/access.conf file helps to allow or deny login to users on the basis of origin.

Syntax of /etc/security/access.conf

permission : users : origins

The first field should be a "+" (access granted) or "-" (access denied) character.

The second field should be a list of one or more login names, group names, or ALL (always matches). A pattern of the form user@host is matched when the login name matches the "user" part, and when the "host" part matches the local machine name.

The third field should be a list of one or more tty names (for non-networked logins), host names, domain names (begin with "."), host addresses, internet network numbers (end with "."), ALL (always matches) or LOCAL (matches any string that does not contain a "." character).

In our example denied to john user to login locally.

Do the following steps as:

1.vi /etc/exports

/data*.example.com(rw,sync)

2.service nfs start

3.service portmap restart

4.chkconfig nfs on

5.chkconfig portmap on

In Linux to share the data we use the /etc/exports file. Pattern is:

Pathclient(permission)

Shared Directory Path, Client can be single host or domain name or ip address. Permission should specify without space with client lists in parentheses.

Do the following steps as:

1.vi /etc/hosts.deny

sshd:ALL EXCEPT .example.com

or

1.vi /etc/hosts.deny

sshd:ALL

2.vi /etc/hosts.allow

sshd:.example.com

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

- Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Do the following steps as:

1.rename the file named.caching-nameserver.conf into named.conf file located into /var/named/chroot/etc

#mv /var/named/chroot/etc/named.caching-nameserver.conf /var/named/chroot/etc/named.conf

2. Check the permission and ownership as well as SELinux Context should be like as:

-rw-r----- root named system_u:object_r:named_conf_t /var/named/chroot/etc/named.conf

If selinux context is mismatch use the restorecon –R /var command

3. vi /var/named/chroot/etc/named.conf

zone “example.com” IN {

type master;

file “example.com.zone”;

};

/var/named/chroot/etc/named.conf file is used to register the zone as well as specify theglobal option for DNS server. There are two types of zone, i. Master, which contains the original data. ii. Slave, backup of master. Here is the example of master zone configuration.

4.vi /var/named/chroot/var/named/example.com.zone

$TTL 345345

@ IN SOA @ webmaster.example.com.(

101;Serial Number

1H;Refresh Time

1M;Retry Time

1W;Expire Time

1D;Minimum Time to Live

)

@ IN NS 192.100.0.X

www IN A 192.100.0.20

5. Check the permission as well as SELinux Context should like this:

-rw-r--r-- root named root:object_r:named_zone_t /var/named/chroot/var/named/example.com.zone

If selinux context is mismatch use the restorecon –R /var command

6.service named start

7.rndc reload

8.chkconfig named on

Zone file should create on /var/named/chroot/var/named. Default Directory Path is specified on /var/named/chroot/etc/named.conf file.

$TTLTime To Live, How much seconds cache server stores the information about DNS. And Five Parameters specified Serial Number used by slave to synchronize with master server. Refresh and Retry Time used by slave server. NS is the Name (DNS) server where lookup the domain. A (Associated IP) for particular host.

Your local domain mean example.com domain. Lookup the example.com using

host example.com you will get the IP address 192.168.0.254.

1.vi /etc/httpd/conf/httpd.conf

<VirtualHost 192.168.0.254>

ServerNamesexample.com

DocumentRoot /var/www/example

DirectoryIndexindex.html

ServerAdminwebmaster@example.com

</VirtualHost>

2.mkdir /var/www/example

3.Download the index.html file from the ftp server specified in question

4.Rename thewww.html file to index.html

5.service httpd start|restart

6.chkconfig httpd on

7.check using: links http://example.com

Do the following steps as:

1.vi /etc/mail/local-host-names

example.com

2.vi /etc/mail/sendmail.mc

dnl # DEAMON_OPTIONS(`Port=smtp,Addr=127.0.0.1,Name=MTA`)dnl

3.m4 /etc/mail/sendmail.mc >/etc/mail/sendmail.cf

4.vi /etc/mail/access

example.comRELAY

RELAY

5.service sendmail start | restart

6.chkconfig sendmail on

/etc/mail/local-host-names file contains the aliases to hostname. Mail server program reads the /etc/mail/sendmail.cf. To change the configuration on mail server, we should edit the /etc/mail/sendmail.mc file and should generate the sendmail.cf using m4 command.

By default sendmail server allows to connect to local host only. So we should edit the /etc/mail/sendmail.mc file to allow connect to other hosts.

By default sendmail server will not forward mail. we should specify on /etc/mail/access to relay or to block mail coming from domain or network or individual email address.

Do the following steps as:

1.vi /etc/hosts.deny

dovecot:ALL EXCEPT .example.com EXCEPT station20.example.com

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

-Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Do the following steps as:

1.vi /etc/samba/smb.conf

[global]

netbios name=station?

workgroup = mygroup

server string=Share from Linux Server

security=user

smb passwd file=/etc/samba/smbpasswd

encrypt passwords=yes

hosts allow=192.168.0.

[data]

path=/data

writable=yes

public=no

browsable=yes

2.service smb start| restart

3.chkconfig smb on

Samba servers helps to share the data between linux and windows. Configuration file is /etc/samba/smb.conf. There are some pre-defined section, i. globaluse to define the global options, ii. Printersuse to share the printers, iii. homesuse to share the user’s home directory.

Security=uservalidation by samba username and password. May be there are other users also. To allow certain share to certain user we should use valid users option.

smbpasswdHelps to change user’s smb password. –a option specifies that the username following should be added to the local smbpasswd file.

If any valid users option is not specified, then all samba users can access the shared data. By Default shared permission is on writable=no means read only sharing. Write list option is used to allow write access on shared directory to certain users or group members.

To allow access the shared directory only from certain network or hosts, there is a option hosts allow= host or network. If this option is applied on global option, then it will apply to all shared directory.

Do the following steps as:

1.vi /etc/sysconfig/network

GATEWAY=192.168.0.254

OR

vi /etc/sysconf/network-scripts/ifcfg-eth0

DEVICE=eth0

BOOTPROTO=static

ONBOOT=yes

IPADDR=192.168.0.?

NETMASK=255.255.255.0

GATEWAY=192.168.0.254

2.service network restart

Quotas are used to limit a user's or a group of users' ability to consume disk space. This prevents a small group of users from monopolizing disk capacity and potentially interfering with other users or the entire system. Disk quotas are commonly used by ISPs, by Web hosting companies, on FTP sites, and on corporate file servers to ensure continued availability of their systems.

Without quotas, one or more users can upload files on an FTP server to the point of filling a filesystem. Once the affected partition is full, other users are effectively denied upload access to the disk. This is also a reason to mount different filesystem directories on different partitions. For example, if you only had partitions for your root (/) directory and swap space, someone uploading to your computer could fill up all of the space in your root directory (/). Without at least a little free space in the root directory (/), your system could become unstable or even crash.

You have two ways to set quotas for users. You can limit users by inodes or by kilobyte-sized disk blocks. Every Linux file requires an inode. Therefore, you can limit users by the number of files or by absolute space. You can set up different quotas for different filesystems. For example, you can set different quotas for users on the /home and /tmp directories if they are mounted on their own partitions.

Limits on disk blocks restrict the amount of disk space available to a user on your system. Older versions of Red Hat Linux included LinuxConf, which included a graphical tool to configure quotas. As of this writing, Red Hat no longer has a graphical quota configuration tool. Today, you can configure quotas on RHEL only through the command line interface.

1. vi /etc/fstab

/dev/hda11/dataext3defaults,usrquota 1 2

2. Either Reboot the System or remount the partition.

Mount –o remount /dev/hda11 /data

3. touch /data/aquota.user

4. quotacheck –ufm /data

5. quotaon -u /data

6. edquota –u user1 /data

and Specified the Soft limit and hard limit on opened file.

To verify either quota is working or not:

Soft limit specify the limit to generate warnings to users and hard limit can’t cross by the user. Use the quota command or repquota command to monitor the quota information.

Do the following steps as:

1.vi /etc/named.conf

zone “example.com” IN {

type master;

file “example.com.zone”;

};

/etc/named.conf file is used to register the zone as well as specify the global option for DNS. There are two types of zone, i. Master, which contains the original data. ii. Slave, backup of master. Here master zone is configured and file name is specified “example.com.zone”, which should be created in /var/named/chroot/var/named/

2.vi /var/named/chroot/var/named/example.com.zone

$TTL 345345

@ IN SOA @ webmaster.example.com.(

101;Serial Number

1H;Refresh Time

1M;Retry Time

1W;Expire Time

1D;Minimum Time to Live

)

@ IN NS 192.100.0.X

www IN A 192.100.0.20

3.service named start

4.rndc reload

5.chkconfig named on

Zone file should create on /var/named/chroot/var/named. Default Directory Path is specified on /var/named.conf.

$TTLTime To Live, How much seconds cache server stores the information about DNS. And Five Parameters specified Serial Number used by slave to synchronize with master server. Refresh and Retry Time used by slave server. NS is the Name (DNS) server where lookup the domain. A (Associated IP) for particular host.

Do the following steps as:

1.vi /etc/dhcpd.conf

ddns-update-style none;

option routers 192.168.0.1;

option domain-name “example.com”;

option domain-name-servers 192.168.0.254;

default-lease-time 21600;

max-lease-time 43200;

subnet 192.168.0.0 netmask 255.255.255.0

{

range 192.168.0.10 192.168.0.50;

}

/etc/dhcpd.conf file is used to configure the DHCP. Some global options i.e Gateway, domainname, DNS server specified using option keyword.

service dhcpd start | restart

Do the following steps as:

1.vi /etc/exports

/local*.example.com(rw,sync) trusted.cracker.org(ro,sync)

service nfs start | restart

service portmap start | restart

chkconfig nfs on

chkconfig portmap on

In Linux to share the data we use the /etc/exports file. Pattern is:

Pathclient(permission)

Shared Directory Path, Client can be single host or domain name or ip address. Permission should specify without space with client lists in parentheses. NFS is RPC service so portmapper service should restart after starting the nfs service. We can specify multiple clients’ list separating by space with different shared option.

Do the following steps as:

1.touch /etc/nologin

2.vi /etc/securetty

comment all available terminall then first.

If /etc/nologin file is created, then pam modules pan_nologin deny to all non-root users to login locally.

/etc/pam.d/login file calls the module.

#%PAM-1.0

auth requiredpam_securetty.so

auth requiredpam_stack.so service=system-auth

auth requiredpam_nologin.so

account requiredpam_stack.so service=system-auth

password requiredpam_stack.so service=system-auth

# pam_selinux.so close should be the first session rule

session requiredpam_selinux.so close

session requiredpam_stack.so service=system-auth

session optionalpam_console.so

# pam_selinux.so open should be the last session rule

session requiredpam_selinux.so multiple open

pam_securetty modules checks the /etc/securetty file, which terminal are available to root. If terminal is not available in this file then pam_securetty module deny to login on unavailable terminal to root user.

Do the following steps as:

1.iptables –t filter –A INPUT –s ! 192.168.0.0/24 –p tcp –d 192.168.0.254 --dport 20 –j DROP

2.iptables –t filter –A INPUT –s ! 192.168.0.0/24 –p tcp –d 192.168.0.254 --dport 21 –j DROP

iptables is the build-in firewall tools, used to filter the packets and for nat. By identifying Source Address, Destination Address, type of protocol, source and destination port we can filter the packets.

-sSource Address

-dDestination Address

-pLayer 3 Protocol

-dDestination Address

--sportSource Prot

--dportDestination Port

-iIncoming Interface

-oOutgoing Interface

-tTable either filter or nat or mangle

-AChain can be either INPUT, OUTPUT, FORWARD, PREROUTING, POSTROUTING.

Do the following steps as:

1.vi /etc/hosts.deny

vsftpd:ALL EXCEPT .example.com

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

-Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Do the following steps as:

1.vi /var/named/chroot/etc/named.conf

options {

forwarders { 192.168.22.250; };

forward only;

};

2. service named start | restart

Caching-only name server forwards a request to another name server or to the root name servers in orders to determine the authoritative name server for the resolution. Once resolution has taken place, the caching-only name server stores the resolved information in a cache for the designated time to live period.

Do the following steps as:

1.vi /etc/security/limits.conf

user1hardnproc7

2.vi /etc/pam.d/system-auth

sessionrequired/lib/security/pam_limits.so

To limit the number of process or number of logins, we should configure on /etc/security/limits.conf. First Columns contains the username separated by comma or @group name. Second column either hard or soft limits. Third columns called the item, maxloigns or nproc etc.

To identify the session of users we should call the pam_limits module in /etc/pam.d/system-auth.

Your local domain mean example.com domain. Lookup the example.com using

host example.com you will get the IP address 192.168.0.254.

1.vi /etc/httpd/conf/httpd.conf

ServerNamesexample.com

DocumentRoot /var/www/example

DirectoryIndexindex.html

ServerAdminwebmaster@example.com

2.mkdir /var/www/example

3.Download the index.html file from the ftp server specified in question

4.Rename thewww.html file to index.html

Check the SELinux context of index page , should like this:

-rw-r--r-- root root system_u:object_r:httpd_sys_content_t /var/www/html/index.html

If SELinux Context is mismatched, use the restorecon –R /var command

5.service httpd start|restart

6.chkconfig httpd on

7.check using: links http://example.com

At exam Lab example.com domain resides on 192.168.0.0/24 Network and cracker.org resides on 192.168.1.0/24 Network.

1.vi /etc/squid/squid.conf

#detault:

http_port8080

#Recommended minimum configuration:

# Near the src acl src section

acl allownet src 192.168.0.0/255.255.255.0

acl denynet src 192.168.1.0/255.255.255.0

#Default:

# http_access deny all

#Under Herehttp_access allow allownet

http_access deny denynet

2.service squid start

3.chkconfig squid on

squid is a proxy caching server, using squid we can share the internet, block the internet, to certain network. First we should define the port for squid, the standard port for squid is 3128. We can run squid on different port by specifying http_port portnumber.

Very Tricky question from redhat. Actually question is giving scenario to you to implement quota to neo user. You should apply the quota to neo user on /home that neo user shouldn’t occupied space more than 70K.

1.vi /etc/fstab

LABEL=/home/homeext3defaults,usrquota0 0To enable the quota on filesystem you should mount the filesystem with usrquota for user quota and grpquota for group quota.

2.touch /home/aquota.userCreating blank quota database file.

3.mount -o remount /homeRemounting the /home with updated mount options. You can verify that /home is mounted with usrquota options or not using mount command.

4.quotacheck -u /homeInitialization the quota on /home

5.edquota –u neo /homeQuota Policy editor

See the snapshot

1 Disk quotas for user neo (uid 500):

2 Filesystem blocks soft hard inodes soft hard

4 /dev/mapper/vo-myvol 2 30 70 1 0 0

Can you set the hard limit 70 and soft limit as you think like 30.

Do the following steps as:

1.rpm –ivhftp://server1/example.com/pub/updates/zsh-*

or

1.Login to ftp server : ftpftp://server1.example.comusing anonymous user.

2.Change the directory: cd pub and cd updates

3.Download the package: mget zsh-*

4.Quit from the ftp prompt : bye

5.Install the package

6.rpm -ivh zsh-*

7.Verify Either package installed or not : rpm -q zsh

To automatically mount at boot time we use the /etc/fstab file. Because /etc/rc.d/rc.sysinit file reads and mount all file system specified in /etc/fstab. To mount Network Sharing Files also use the /etc/fstab but filesystem is nfs.

vi /etc/fstab

192.168.0.254:/data/commonnfsdefaults0 0

reboot the system.

When you Boot the System, it starts on default Runlevel specified in /etc/inittab:

Id:?:initdefault:

When System Successfully boot, it will ask for username and password. But you don’t know the root’s password. To change the root password you need to boot the system into single user mode. You can pass the kernel arguments from the boot loader.

Restart the System.

You will get the boot loader GRUB screen.

Press a and type 1 or s for single mode

ro root=LABEL=/ rhgb queit s

System will boot on Single User mode.

Use passwd command to change.

Press ctrl+d

Do the following steps as:

1.chgrp sysadmin /data

2.Verify using ls -ld /data command. You should get like

drwxr-x--- 2 root sysadmin 4096 Mar 16 17:59 /data

chgrp command is used to change the group ownership of particular files or directory.

Another way you can use the chown command.

chown root:sysadmin /data

Do the following steps as:

1.Create a partition having size 5 GB and change the syste id ‘8e’.

2.use partprobe command

3.pvcreate /dev/hda9Suppose your partition number is hda9.

4.vgextend test0 /dev/hda9vgextend command add the physical disk on volume group.

5.lvextend –L+5120M /dev/test0/lvtestvolume

6.verify using lvdisplay /dev/test0/lvtestvolume.

Do the following steps as:

useradd username

passwd username

usermod -e “date”

example: usermod -e “12 Feb 2006” user4

Verify: chage –l user4

Do the following steps as:

1.groupadd sysadmin

groupadd command is used to create the group and all group information is stored in /etc/group file.

Do the following steps as:

rpm -ivh ftp://server1.example.com/pub/kernel-hugemem-*

2. vi /etc/grub.conf

Set the default to new kernel

default=0

Example of /etc/grub.conf

default=0

timeout=5

splashimage=(hd0,0)/grub/splash.xpm.gz

hiddenmenu

title Red Hat Enterprise Linux ES (2.6.9-5.ELhugemem)

root (hd0,0)

kernel /vmlinuz-2.6.9-5.ELhugemem ro root=LABEL=/1 rhgb quiet

initrd /initrd-2.6.9-5.ELhugemem.img

title Red Hat Enterprise Linux ES (2.6.9-5.EL)

root (hd0,0)

kernel /vmlinuz-2.6.9-5.EL ro root=LABEL=/1 rhgb quiet

initrd /initrd-2.6.9-5.EL.img

rpm command is used to install, update and remove the rpm package. -ivh option is install, verbose, and display the hash mark.

By default user1 can remove user2’s files due to directory permission to group member. We can prevent of deleting files from others users using Sticky Bits.

chmod o+t /data

Verify /data: ls -ld /data

You will get: drwxrwx—T

Questions asking you to install the dialog package from the server. In your Lab FTP server as well as NFS server are configured. You can install either through FTP or NFS.

1.Just Login to server1.example.com through FTP: ftp server1.example.com

2.Enter to pub directory: cd pub

3.Enter to RedHat/RPMS: cd RedHat/RPMS

4.Download the Package: mget dialog-*

5.Logout from the FTP server: bye

6.Install the package: rpm -ivh dialog-*

7.Verify the package either installed or not: rpm -q dialog

Do the following steps as:

1.chgrp sysuser /archive

2.Verify using ls -ld /archive command. You should get like

drwxr-x--- 2 root sysadmin 4096 Mar 16 17:59 /archive

chgrp command is used to change the group ownership of particular files or directory.

Another way you can use the chown command.

chown root:sysuser /archive

Do the following steps as:

1.useradd eric

Very tricky question given to you that this user should not belongs to sysadmin group.

Do the following steps as:

rpm -ivh ftp://server1.example.com/pub/kernel-hugemem-*

2. vi /etc/grub.conf

Set the default to new kernel

default=0

Example of /etc/grub.conf

default=0

timeout=5

splashimage=(hd0,0)/grub/splash.xpm.gz

hiddenmenu

title Red Hat Enterprise Linux ES (2.6.9-5.ELhugemem)

root (hd0,0)

kernel /vmlinuz-2.6.9-5.ELhugemem ro root=LABEL=/1 rhgb quiet

initrd /initrd-2.6.9-5.ELhugemem.img

title Red Hat Enterprise Linux ES (2.6.9-5.EL)

root (hd0,0)

kernel /vmlinuz-2.6.9-5.EL ro root=LABEL=/1 rhgb quiet

initrd /initrd-2.6.9-5.EL.img

rpm command is used to install, update and remove the rpm package. -ivh option is install, verbose, and display the hash mark.

Do the following steps as:

1.vi /etc/cron.allow

root

or

vi /etc/cron.deny

Write all user name to deny.

/etc/cron.allow, /etc/cron.deny file is used to control users to allow or deny. If /etc/cron.allow file is created only that users are allowed to run cron schedule. Another way to deny to users is /etc/cron.deny write all user name on single line.

Note: Examiner will provide you the Installation startup CD. And here mentioned size may vary see on the exam paper.

1.Insert the CD on CD-ROM and start the system.

2.In Boot: Prompt typelinux askmethod

3. It will display the language, keyboard selection.

4. It will ask you for the installation method.

5. Select the NFS Image from the list

6. It will ask the IP Address, Net mask, Gateway and Name Server. Select Use

Dynamic IP Configuration: because DHCP Server will be configured in your exam lab.

7. It will ask for the NFS Server Name and Redhat Enterprise Linux Directory.

Specify the NFS Server: 192.168.0.254

Directory: /var/ftp/pub

8. After Connecting to the NFS Server Installation start in GUI. Go up to the partition screen by selecting the different Options.

9. Create the partition According to the Question because Size and what-what partition should you create at installation time is specified in your question

10. Then select the MBR Options, time zone and go upto package selections.

It is another Most Important Time of installation. Due to the time limit, you should care about the installation packages. At Exam time you these packages are enough.

X-Window System

GNOME Desktop

(these two packages are generally not required)

Administration Tools.

System Tools

Windows File Server

FTP Servers

Mail Servers

Web Servers

Network Servers

Editors

Text Based Internet

Server Configuration Tools

Printing Supports

When installation will complete, your system will reboot. Jump for another Question.

Do the following steps as:

1.usermod -G sysusers jeff

2.usermod –G sysuser marion

3.Verify by reading /etc/group file

Using usermod command we can make user belongs to different group. There are two types of group one primary and another is secondary. Primary group can be only one butuser can belongs to more than one group as secondary.

usermod -g groupname usernameTo change the primary group of the user

usermod -G groupname usernameTo make user belongs to secondary group.

chown or chgrp command is used to change the ownership.

Syntax of chown: chown [-R] username:groupname file/directory

Syntax of chgrp: chgrp [-R] groupname file/directory

Whenever user creates the file or directory, the owner of that file/directory automatically will be that user and that user’s primary group name.

To change group owner ship

chgrp training /data Which set the Group Ownership to training

or

chown root.training /dataWhich set the user owner to root and group owner to training group.

Verify /data using: ls -ld /data

You will get: drwxr-xr-x 2 root training …………..

Do the following steps as:

1.groupadd sysuser

groupadd command is used to create the group and all group information is stored in /etc/group file.