LPIC-2 Cert Guide

Introduction xxiii




Part I : Capacity Planning




Chapter 1 Measuring and Troubleshooting Resource Usage 3




"Do I Know This Already?" Quiz 3




Foundation Topics 6




Monitoring Your System 6




CPU Monitoring 7




Basic CPU Load Information 7




Detailed CPU Load Information 7




Memory Monitoring 10




Basic Memory Usage Information 10




Detailed Memory Usage Information 11




Disk I/O Monitoring 12




Listing Open Files 14




Network I/O Monitoring 17




Additional Monitoring Tools 18




Listing Processes 18




Displaying User Activity 21




Exam Preparation Tasks 22




Review All Key Topics 22




Define Key Terms 23




Review Questions 23




Part II: Managing the Kernel




Chapter 2 Predict Future Resource Needs 27




"Do I Know This Already?" Quiz 27




Foundation Topics 29




The collectd Daemon 29




Configuring collectd 29




Installing collectd 31




Monitoring Solutions 33




Nagios 33




MRTG 33




Cacti 33




sar 34




Further Considerations 34




OK, Now What? 34




Exam Preparation Tasks 36




Review All Key Topics 36




Define Key Terms 36




Review Questions 36




Chapter 3 Kernel Components and Compiling 41




"Do I Know This Already?" Quiz 41




Foundation Topics 43




Kernel Components 43




Kernel Documentation 43




Tweaking the Kernel 44




Kernel Images 45




Compiling the Kernel 46




Cleaning the Kernel 47




Create the Configuration File 48




Compiling the Kernel 55




Additional Make Targets 57




Exam Preparation Tasks 58




Review All Key Topics 58




Define Key Terms 58




Review Questions 58




Chapter 4 Kernel Runtime Management and Troubleshooting 63




"Do I Know This Already?" Quiz 63




Foundation Topics 65




Kernel Modules 65




Module Files 65




Listing Modules That Are Loaded 67




Loading Modules into Memory 68




Unloading Modules from Memory 71




Listing Modules Information 71




The /proc/sys Filesystem 73




Module Aliases 76




Displaying Hardware Information 77




The lspci Command 77




The lsdev Command 81




The lsusb Command 82




The udev System 85




Exam Preparation Tasks 87




Review All Key Topics 87




Define Key Terms 87




Review Questions 88




Part III: Managing System Startup




Chapter 5 Customizing SysV-init System Startup 91




"Do I Know This Already?" Quiz 91




Foundation Topics 93




The SysV-init Process 93




Understanding Runlevels 93




The /etc/inittab File 94




Boot Scripts 98




The /etc/init.d directory 101




Modifying Runlevels 101




The update-rc.d Command 102




The chkconfig Command 103




Switching Runlevels 104




Exam Preparation Tasks 105




Review All Key Topics 105




Define Key Terms 105




Review Questions 105




Chapter 6 Administrating System Recovery 109




"Do I Know This Already?" Quiz 109




Foundation Topics 111




Understanding the Boot Process 111




The BIOS/UEFI Phase 111




The Boot loader Phase 111




The Kernel Phase 112




The Post-Kernel Phase 113




GRUB 113




Legacy GRUB Configuration 114




Changing Legacy GRUB During Boot 117




Booting to Single User Mode in Legacy GRUB 120




Securing Legacy GRUB 122




GRUB 2 Configuration 125




Saving GRUB 2 Changes 127




GRUB 2 Titles 127




Booting to Single User Mode in GRUB 2 128




Securing GRUB 2 128




Fixing Filesystems 130




Exam Preparation Tasks 131




Review All Key Topics 131




Define Key Terms 131




Review Questions 132




Chapter 7 Alternate Boot Loaders 135




"Do I Know This Already?" Quiz 135




Foundation Topics 137




LILO 137




Configuring LILO 137




Booting LILO 140




Booting to Single User Mode 141




Additional Boot loaders 143




Understanding SYSLINUX 143




Understanding EXTLINUX 144




Understanding ISOLINUX 144




Understanding PXELINUX 145




Exam Preparation Tasks 147




Review All Key Topics 147




Define Key Terms 147




Review Questions 148




Part IV: Managing Filesystem and Devices




Chapter 8 Operating the Linux Filesystem 151




"Do I Know This Already?" Quiz 151




Foundation Topics 153




Filesystem Essentials 153




Filesystem Types 154




The umount Command 155




The mount Command 155




Mounting Filesystems Manually 158




Problems Unmounting Filesystems 159




Mounting Filesystems Automatically 160




Device Descriptors 162




Mount Options 163




Swap Space 166




Exam Preparation Tasks 167




Review All Key Topics 167




Define Key Terms 168




Review Questions 168




Chapter 9 Maintaining a Linux Filesystem 171




"Do I Know This Already?" Quiz 171




Foundation Topics 173




Filesystems Essentials 173




The ext2 Filesystem 173




The ext3 Filesystem 173




The ext4 Filesystem 174




The xfs Filesystem 175




The Btrfs Filesystem 175




Creating Filesystems 175




ext-Based Filesystem Tools 179




fsck.* 179




dumpe2fs 179




tune2fs 182




debugfs 182




xfs-Based Filesystem Tools 184




xfsdump and xfsrestore 184




xfs_info 187




xfs_check and xfs_repair 188




Creating Swap Devices 189




Monitoring SMART Devices 190




Exam Preparation Tasks 191




Review All Key Topics 191




Define Key Terms 192




Review Questions 192




Chapter 10 Creating and Configuring Filesystem Options 195




"Do I Know This Already?" Quiz 195




Foundation Topics 197




Removable Media Filesystems 197




HFS-Hierarchical File System 197




ISO9660 197




UDF 198




Creating Removable Media Filesystems 198




Encrypted Filesystems 201




Managing autofs 204




Exam Preparation Tasks 207




Review All Key Topics 207




Key Terms 208




Review Questions 208




Part V: Administrating Advanced Storage Device




Chapter 11 Configuring RAID 211




"Do I Know This Already?" Quiz 211




Foundation Topics 213




RAID Fundamentals 213




RAID Levels 213




RAID Device-Entire Drive or Partition? 219




Create a RAID Device 221




Managing RAID Devices 224




Exam Preparation Tasks 226




Review All Key Topics 226




Define Key Terms 227




Review Questions 227




Chapter 12 Adjusting Storage Device Access 231




"Do I Know This Already?" Quiz 231




Foundation Topics 233




DMA, hdparm, and sdparm 233




The hdparm Command 234




The sdparm Command 236




System Resources 237




Kernel Parameters 239




iSCSI 241




Target Configuration 242




Initiator Configuration 244




Exam Preparation Tasks 248




Review All Key Topics 248




Define Key Terms 248




Review Questions 249




Chapter 13 Logical Volume Manager 253




"Do I Know This Already?" Quiz 253




Foundation Topics 255




Logical Volume Manager Concepts 255




Advantages of LVM on a System with a Single Drive 257




LVM Essentials 258




Extents 259




Logical Volumes 262




Device Naming 263




Using Logical Volumes and Additional LVM Commands 264




Displaying LVM Information 265




Additional LVM Commands 268




Resizing Logical Volumes 271




LVM Snapshots 274




Exam Preparation Tasks 277




Review All Key Topics 277




Define Key Terms 278




Review Questions 278




Part VI: Confi guring the Network




Chapter 14 Basic Network Configuration 281




"Do I Know This Already?" Quiz 281




Foundation Topics 283




Ethernet Network Interfaces 283




The arp Command 286




The route Command 287




The ip Command 288




Access to Wireless Networks 290




The iwconfig Command 290




The iwlist Command 291




Exam Preparation Tasks 294




Review All Key Topics 294




Define Key Terms 294




Review Questions 295




Chapter 15 Advanced Network Configuration and Troubleshooting 299




"Do I Know This Already?" Quiz 299




Foundation Topics 301




The ping and nmap Commands 301




The nmap Command 302




The netstat, nc, and lsof Commands 307




The lsof Command 310




The nc Command 312




The tcpdump Command 313




Exam Preparation Tasks 315




Review All Key Topics 315




Define Key Terms 315




Review Questions 315




Chapter 16 Troubleshooting Network Issues 319




"Do I Know This Already?" Quiz 319




Foundation Topics 321




Network Configuration Files 321




The /etc/resolv.conf File 321




The /etc/hosts File 323




The Local Hostname 325




The /etc/network/interfaces File 326




The /etc/sysconfig/network-scripts Files 327




Network Troubleshooting 328




Log Files and Tools 328




The traceroute Command 330




The /etc/hosts.allow and /etc/hosts.deny Files 333




Additional Network Troubleshooting Commands 336




NetworkManager 337




Exam Preparation Tasks 339




Review All Key Topics 339




Define Key Terms 340




Review Questions 340




Part VII: Performing System Maintenance




Chapter 17 Make and Install Programs from Source 343




"Do I Know This Already?" Quiz 343




Foundation Topics 345




Securing and Unpacking Source Code 345




Downloading Source Code on RPM-Based Systems 345




Downloading Source Code on Debian-Based Systems 347




Downloading Source Code from Original Source 348




Unpacking the Source Code 349




Building and Installing from Source Code 350




Applying Patches 353




Exam Preparation Tasks 354




Review All Key Topics 354




Define Key Terms 355




Review Questions 355




Chapter 18 Backup Operations 359




"Do I Know This Already?" Quiz 359




Foundation Topics 361




Backup Strategy 361




What Needs to Be Backed Up? 361




How Often? 364




Full or Incremental? 364




Where Will the Backup Be Stored? 367




What Backup Tool Will Be Used? 367




Standard Backup Utilities 368




The dd Command 368




The tar Command 369




The rsync Command 373




Third-Party Backup Utilities 374




Amanda 374




Bacula 374




BackupPC 374




Exam Preparation Tasks 375




Review All Key Topics 375




Define Key Terms 375




Review Questions 375




Chapter 19 Notify Users on System-Related Issues 379




"Do I Know This Already?" Quiz 379




Foundation Topics 381




Pre- and Post-Login Messages 381




The /etc/issue File 381




The /etc/issue.net File 383




Additional Pre-Login Messages 385




The /etc/motd File 386




Broadcasting Messages 387




The wall Command 387




The shutdown Command 389




Exam Preparation Tasks 391




Review All Key Topics 391




Define Key Terms 391




Review Questions 391




Part VIII: Administrating Domain Name Server




Chapter 20 Basic DNS Server Configuration 395




"Do I Know This Already?" Quiz 395




Foundation Topics 397




DNS Essentials 397




Essential Terms 397




How Name Resolution Works 399




Basic BIND Configuration 403




The /etc/named.conf file 403




The allow-query Setting 406




Additional /etc/named.conf Settings 407




Essential BIND Commands 408




The rndc Command 408




The dig and host Commands 411




Exam Preparation Tasks 413




Review All Key Topics 413




Define Key Terms 413




Review Questions 414




Chapter 21 Create and Maintain DNS Zones 417




"Do I Know This Already?" Quiz 417




Foundation Topics 419




Zone Files 419




Zone File Basics 419




Zone File Entries in the /etc/named.conf File 420




Zone File Syntax 421




Zone Record Types 423




The SOA Record Type 423




The Address Record Type 425




The Canonical Name Type 425




The Name Server Record Type 426




The Mail eXchange Record Type 426




The PoinTeR Record Type 427




Putting It All Together 427




Testing the DNS Server 431




The dig Command 432




The nslookup and host Commands 433




Exam Preparation Tasks 434




Review All Key Topics 434




Define Key Terms 434




Review Questions 434




Chapter 22 Securing a DNS Server 439




"Do I Know This Already?" Quiz 439




Foundation Topics 441




Send BIND to Jail 441




Create the chroot Directory and Files 442




Configure Named to Started in the Jail 443




Split BIND Configuration 443




Transaction Signatures 446




The dnssec-keygen Command 447




The dnssec-signzone Command 448




Exam Preparation Tasks 449




Review All Key Topics 449




Define Key Terms 449




Review Questions 450




Part IX: Confi guring Web Services




Chapter 23 Implementing a Web Server 453




"Do I Know This Already?" Quiz 453




Foundation Topics 455




Basic Apache Web Server Configuration 456




Starting the Apache Web Server 457




Apache Web Server Log Files 458




Enable Scripting 459




Apache Web Server Security 463




Essential Settings 463




User Authentication 465




Virtual Hosts 466




Configuring IP-Based Virtual Hosts 466




Configuring Name-Based Virtual Hosts 467




Exam Preparation Tasks 468




Review All Key Topics 468




Define Key Terms 468




Review Questions 468




Chapter 24 Apache Configuration for HTTPS 473




"Do I Know This Already?" Quiz 473




Foundation Topics 475




SSL Essentials 475




SSL Issues 476




Self-Signing 477




SSL and Apache 477




SSL Server Certificate 478




Apache SSL Directives 484




Exam Preparation Tasks 486




Review All Key Topics 486




Define Key Terms 486




Review Questions 486




Chapter 25 Implementing a Proxy Server 489




"Do I Know This Already?" Quiz 489




Foundation Topics 491




Squid Basics 493




Squid Access Rules 494




Built-In acls 496




Understanding the Squid Rules 496




Nginx Configuration 497




Client Configuration 500




Exam Preparation Tasks 504




Review All Key Topics 504




Define Key Terms 504




Review Questions 504




Part X: Administrating File Sharing




Chapter 26 SAMBA Server Configuration 507




"Do I Know This Already?" Quiz 507




Foundation Topics 509




SAMBA Configuration 510




The [global] Section 511




The [homes] Section 512




The [printers] Section 513




Custom Shares 514




SAMBA Server 515




SAMBA Accounts 516




Mapping Local Accounts 517




Accessing SAMBA Servers 518




Mounting SAMBA Shares 520




Exam Preparation Tasks 521




Review All Key Topics 521




Define Key Terms 522




Review Questions 522




Chapter 27 NFS Server Configuration 525




"Do I Know This Already?" Quiz 525




Foundation Topics 527




Configuring an NFS Server 527




The /etc/exports File 527




User ID Mapping 529




NFS Server Processes 530




Understanding portmap 531




NFS Server Commands 533




Configuring an NFS Client 534




Review All Key Topics 536




Define Key Terms 537




Review Questions 537




Part XI: Managing Network Clients




Chapter 28 DHCP Configuration 541




"Do I Know This Already?" Quiz 541




Foundation Topics 543




DHCP Configuration Basics 543




The ddns-update-style and Ignore client-updates Directives 545




The Subnet Directive 545




Configuring Static Hosts 547




Configuring BOOTP Hosts 547




DHCP Log Files 548




Configuring a DHCP Relay Agent 549




Exam Preparation Tasks 550




Review All Key Topics 550




Define Key Terms 550




Review Questions 550




Chapter 29 PAM Authentication 555




"Do I Know This Already?" Quiz 555




Foundation Topics 557




PAM Configuration Basics 557




PAM Types 559




Control Values 562




PAM Modules 564




The pam_unix Module 565




The pam_cracklib Module 565




The pam_limits Module 566




The pam_listfile Module 568




Exam Preparation Tasks 569




Review All Key Topics 569




Define Key Terms 569




Review Questions 569




Chapter 30 Configuring an OpenLDAP Server 573




"Do I Know This Already?" Quiz 573




Foundation Topics 576




Key LDAP Terms 576




The slapd.conf File 579




Customize Your LDAP Domain 579




Configuring Logging 581




Configuring the Database Directory 582




Starting the LDAP Server 582




OpenLDAP Objects 584




OpenLDAP Schemas 584




OpenLDAP Database Changes 586




Exam Preparation Tasks 589




Review All Key Topics 589




Define Key Terms 589




Review Questions 590




Chapter 31 LDAP Client Usage 593




"Do I Know This Already?" Quiz 593




Foundation Topics 595




Using the ldapdelete Command 596




Using the ldapsearch Command 597




Using the ldappasswd Command 600




Exam Preparation Tasks 601




Review All Key Topics 601




Review Questions 601




Part XII: Administrating E-Mail Services




Chapter 32 Using E-mail Servers 605




"Do I Know This Already?" Quiz 605




Foundation Topics 607




SMTP Basics 607




Configuring Postfix 609




Postfix Configuration File 610




Important Postfix Settings 611




Aliases 612




Postfix Virtual Domains 614




sendmail and exim 614




Monitoring E-mail Servers 616




Exam Preparation Tasks 617




Review All Key Topics 617




Define Key Terms 617




Review Questions 618




Chapter 33 Managing Local E-mail Delivery 621




"Do I Know This Already?" Quiz 621




Foundation Topics 623




procmail Basics 623




procmail Rules 625




mbox and Maildir Formats 628




Exam Preparation Tasks 629




Review All Key Topics 629




Define Key Terms 629




Review Questions 630




Chapter 34 Managing Remote E-mail Delivery 633




"Do I Know This Already?" Quiz 633




Foundation Topics 635




IMAP and POP Essentials 635




The Courier Server 636




The /etc/courier/authdaemonrc File 638




The /etc/courier/imapd File 638




The /etc/courier/pop3d File 639




The Dovecot Server 639




Exam Preparation Tasks 643




Review All Key Topics 643




Define Key Terms 644




Review Questions 644




Part XIII: Administrating System Security




Chapter 35 Configuring a Router 647




"Do I Know This Already?" Quiz 647




Foundation Topics 649




Firewall Essentials 649




Targets 653




iptables Examples 653




rothwell.indb xviii 4/22/16 9:09 AM




Contents xix




Saving the Rules 656




Advanced iptables Features 657




Private Networks and NAT 658




Exam Preparation Tasks 659




Review All Key Topics 659




Define Key Terms 659




Review Questions 660




Chapter 36 Securing FTP Servers 663




"Do I Know This Already?" Quiz 663




Foundation Topics 665




Configuring vsftpd 665




Anonymous FTP 665




Limiting User Accounts 667




Additional Settings 669




Configuring Pure-FTPd 670




ProFTPd 670




Active versus Passive Mode 671




Exam Preparation Tasks 674




Review All Key Topics 674




Define Key Terms 674




Review Questions 675




Chapter 37 Secure Shell (SSH) 679




"Do I Know This Already?" Quiz 679




Foundation Topics 681




Configuring the Secure Shell Server 681




Basic Configuration Settings 681




Settings That Affect User Access 682




Secure Shell Client Commands 684




The ssh_config File 684




The ssh Command 685




The scp and sftp Commands 687




Advanced SSH Features 687




Passwordless Login 688




Exam Preparation Tasks 690




Review All Key Topics 690




Review Questions 690




Chapter 38 Security Tasks and OpenVPN 693




"Do I Know This Already?" Quiz 693




Foundation Topics 695




Security Tools 695




fail2ban 696




OpenVAS and Snort 698




Security Alert Services 698




OpenVPN 699




CA Setup 700




Create VPN Server Certificate 701




Create VPN Client Certificate 703




Basic Server Setup 705




Basic Client Setup 706




Exam Preparation Tasks 709




Review All Key Topics 709




Define Key Terms 709




Review Questions 710




Part XIV: Exam Preparation




Chapter 39 Final Preparation 713




Foundation Topics 714




How to Prepare for the LPI Exams 714




Exam Objectives 714




Important Exam Facts 714




Right Before Your Exam Starts 714




How to Look at the Objectives 715




Studying for the Exams-What to Do 717




Machines or Virtual Machines? 717




Studying for the Exams-What Not to Do 718




LPI Certifications and Distributions 718




You Have to Install Something 719




LPI Exam Question Types 719




Single Answer Multiple Choice 720




Choose Multiple 721




Choose All That Apply 721




Fill-in-the-Blank 722




Final Recommendations 724




Summary 724




Glossary 727




Appendix A Answers to "Do I Know This Already?" Quizzes and Review Questions 739




Appendix B LPIC-2 Exam Updates 773




TOC, 9780789757142, 4/22/2016