Linux Reseau Projet English

8/12/2019 Linux Reseau Projet English

1/48

Computer Science

SchoolCOMPUTER SCIENCE (OPTION N ETWORKING)

D.E.C / A.E.C PROGRAMS

LINUX NETWORK SERVICES

Project

Winter 2!"

Linux (Networking) Page 1


2/48

PART I

O#$ECTIVES %I& Con'i()re LINUX in * TCP/IP Net+or,

II& I-e-ent * D0CP Ser1er

III& Int* *n3 con'i()re * SAM#A Ser1er

IV& I-e-ent * N4S Ser1er

V& I-e-ent Internet conne5ion 6*rin(



3/48

NETWORK SERVIECES IN LINUX

PRO$ECT

N*-e% Gro) %

O#$ECTIVES %

I& Con'i()re LINUX in * TCP/IP Net+or,

II& I-e-ent * D0CP Ser1er

III& Int* *n3 con'i()re * SAM#A Ser1er

IV& I-e-ent * N4S Ser1er

V& I-e-ent Internet conne5ion 6*rin(

PRERE7UISITES

1. Have installed Linux Fedora2. Know the basics commands of Linux

3. Know the basic concepts of T!"I! networ#in$

%. Know the role of the followin$ services& '()*("+H!",F'

IMPLEMENTATION O4 T0E PRO$ECT %

-L/-0T compan inc. has a networ# of 12 LI,4 wor#stations5 a 6indowsserver and two Linux servers 71 of them has 2 ,Is8.

12 computers with networ# interface cards 1 outlet for each !



4/48

2 shared networ# printers 2 networ# printers 9 2%:port 'witch T! cat; 9 patch panel 2% ports 2 Linux servers /peratin$ sstems 6indows and LI,4

The compan has hired ou to install and confi$ure the followin$ services&'()*( " +H! " ,F'.


5/48

I& CON4IGURE LINUX IN A TCP/IP NETWORK

O#$ECTIVES %

18 onfi$ure the networ# interface for T!"I! protocol38 )odif the TH0,T ,Is confi$uration files

28 se T!"I! commands

CONTEXT


6/48

assi!ned to a specific interface&

DEVICE=eth0

BOOTPROTO=none or dhcp orbootpONBOOT=yesNETWORK=!.!..!

NET"#$K=%&&.%&&.%&&.!'(#))R=!.!..%*+$ER,T=no

38 0estart the networ# service service network restrt

/etc/init.0/network restrt

%8 -erif the I! address/sbin/ifconfig 1

;8 Test communicationping

;8 nable "+isable the networ#interface if2p eth! or if0own eth!

98 (dd routes or displa theroutin$ table /sbin/ro2te 00 -net

=8 'how the path ta#en b atransmitted pac#et trcero2te

>8 -iew details about activeconnections on our machine&ports5 statistics ...

netstt

#& (r*6ic* -o3e



7/48

18 'tart the networ# interface confi$uration 28 )odif the characteristics of the networ#interface card to confi$ure manual " +H!"*//T!

38 onfi$ure +,' information %8


8/48

18 onfi$ure our ,I with a static I! address &

omputer name

I! (ddress

,etwor# mas#

+efault $atewa

+,'

28 +ispla our I! address with & i'con'i(

38 Test usin$ in(the communication with other computers

-erification @@@@@@@@@@@

II& IMPLEMENTING A D0CP SEVER

?D@n*-ic 0ot Con'i()r*tion Protoco&O#$ECTIVES %

18 Install +H! 'erver

28 onfi$ure +H! 'erver options

38 'tart the +H! 'erver

%8 Teste the +H! 'erver with 6indows and Linux clients

Conte5t


9/48

STEPS %

*& 4ie to coni3er

4ILES ROLE

/etc/dhcp/dhcpd.conf+H! 'erver confi$uration file

/var/lib/dhcpd/dhcpd.leases +H! client lease database

& E5*-e

STEPS RBSULTS18 Installationrp3 -4 0hcp

or

y23 instll 0hcp

28 onfi$urationexample /etc/dhcp/dhcpd.conf

#ddns-update-style ad-hoc ; # ncessaire pour dhcp Fedora 8+ s2bnet 5%.67.%%.! net3sk %&&.%&&.%&&.! 8

option ro2ters 5%.67.%%.9 psserelle pr 0:f2t

option s2bnet-3sk %&&.%&&.%&&.!9 3s42e 0e so2s-r:se2

option 0o3in-n3e ;ho3e.ln;9 no3 0e 0o3ine

option 0o3in-n3e-servers 5%.67.%%.-lese-ti3e ?@%!! 9 02r:e 3>i 02 bil en sec.

$i on ve2t fire 0es r:servtions Attrib2er to2t le te3ps

l 33e '(

2n certin :42ipe3entC on les ins:rer ici.

D

host no33chine 8hr0wre ethernet %@?&6*7#B,)9 0resse "#, 0e l

3chine

fi>e0-00ress 5%.67.%%.!!9 '( 42e lon ve2t l2i ssigner

D

$i on 0ispose 0e be2co2p 0e sttions

gro2p pclin2> 8

2se-host-0ecl-n3es on9



10/48


11/48

0an$e and lease duration& 1C2.19>.x.1 1C2.19>.x.1; and 1 da

38 6or# on the +H! client

a8 se a 6indows client to obtain an I! addressb8 se a Linux client to obtain an I! address

I! (ddress I!

'ubnet mas#

+efault $atewa

+,'

verification @@@@@@@@@@@

III& IMPLEMNETING A SAM#A SERVER

O#$ECTIVES %

18 Install a '()*( 'erver

28 onfi$ure the '()*( 'erver

38 reate user accounts for the '()*( 'erver

%8 'tart '()*( 'erver et ,)* for ,et*I/' name resolution

;8 Test the '()*( 'erver

Conte5t


12/48

2& +isable the F+/0(. firewall 8 er1ice it*e to"& reate the folder to be shared in the "home director with the =;;

permissions& 'tart ')* service for '()*( and ,)* service for name resolutionD er1ice - t*rt

D er1ice n- t*rt;& nable automatic startup for ')* and ,)* servicesD c6,con'i( - onD c6,con'i( n- on

9& Test the '()*( connexion from a 6indows computer!& If the connexion fails5 review the previous steps.

EXAMPLE o' SAM#A con'i()r*tion

Install '()*(

reate the folder to be shared in the "homedirecrot

dit the "etc"samba"smb.conf file



13/48

(dd and"or modif lines in the -.con' filefor share securit mode

securit E share

NOTES %!& To en*e t6e 4EDORA Net#IOS n*-eto e 1iie

netbios name E ,/)deF+/0(

2& To *cti1*te t6e 4EDORA er1er * *WINS er1er

wins support E es

"& To *cti1*te t6e 4EDORA er1er * *WINS cient

wins server E I!@server@6I,'

'tart - *n3 n- services

nable automatic startup for smb and nmbservices

Ste%

A& Co--*n3 -o3e % E5*-e o' con'i()r*tion

18 'erver & Linux '()*(

18 Installation @)- int* *-* *-*cient

@)- int* @te-con'i(*-*7for the $raphical interface8

28 confi$uration fileexample&/etc/samba/smb.conf

FgloblGworkgro2p = groupe00netbios n3e = ServeurLinuxsec2rity=2serwins s2pport = yeshost llow = 5%.67.!. %*.encrypt psswor0s = yes

s3b pssw0 file = /etc/samba/smbpasswd



14/48

9 le co3pte invite cc:0er sns 3ot 0e psseg2est cco2nt = invite

[cdrom # chemin d'accs au point de montage du CDROM

pth = /mnt/cdrom # accessible en lecture

re0p2blic = yes # l'!criture sera forc!ment interdite

writeble = noFp2blicG co33ent =R:pertoire p2blic pth = /ho3e/p2blic g2est ok = yes writeble = yes les fichiers cr::s sont en lect2re se2le< po2r les2tres Al ct:gorie oC crete 3o0e = !66?FprintersG co33ent = #ll (rinters pth = /vr/spool/s3b

printer 03in = Hohn< e0< I03ins crete 3sk = !6!! g2est ok = Jes printble = Jes 2se client 0river = Jes browseble = Jes

%8 'pecif the '()*(userAs password in/etc/s3bpssw0

s3bpssw0 1 2sgers3b

38 'tart " 'top '()*(and ,)*76I,'8

#service smb startor stop orrestrt

service nmb start

5) Test the syntax of the

/etc/smb.conffile using

the testparm utility

testparm

98 +eclare the 4! hostin the hosts files

vi /etc/hosts

vi /etc/sysconfig/network

28 Win3o+ XP Cient 'or Lin)5



15/48

a8 onfi$ure 6indows 4! in a peer to peerwith Fedora and choose the samewor#$roup and an I! address from the samesubnet

b8 'hare a folder and $rant accesspermissions

c8 From networ# nei$hborhood ou can seeand access the folder on Fedora

38 Lin)5 Cient 'or Win3o+

STEPS RESULTS

18 reate a folderthat will be used asmountin$ point to theshare on 6indows

3k0ir /3nt/0isk

28 )ount or unmountsthe shared folder on6indows in the foldercreated in 1

smbmount //!"!/partage /mnt/disk

s3b23o2nt ... b2t< in E)OR#< +$E

3o2nt -t cifs //5%.67../shre /3nt/somedirector"

#& Con'i()re SAM#A +it6 * (r*6ic* Inter'*ce%

a8 reate the folder to share in the "homedirector

b8 set permissions to =;;

c8 'tart the '()*( confi$uration $raphicalInterface

e8 rete the '()*( share with thenecessar permissions



16/48

d8 onfi$ure the 6or#$roup and the '()*(authentication mode

f8 (dd the '()*( authoried users 7thesame as in 6indows 8

$8 0estart ')* and ,)* Dservice smb restart

Dservice nmb restart

Wor, to 3o %

18 Wor, on t6e SAM#A Ser1er

onfi$ure '()*( 'erver usin$ the followin$ information &

Wor,(ro) G0/!

Uer )*(er*-*for Linux and 6indows



17/48

*+or3 123%;9

ec)rit@ ser

S6*re3 'o3er !arta$esamba on Linux and 6indows with full access

2& Wor, on Win3o+ XP

a8 reate a peer to peer networ# with6indows 4!

6or#$roup &

I! address " subnet mas#

b8 an ou see the Fedora computerwhen ou browse the networ#?

c8 an ou access the Fedora sharedfolder *rt*(e*-*?

d8 Install a printer and share it

38 6or# on the Linux client to connect to 6indows 4! shares

3.18 )ount the *rt*(e*-*share available on 6indows ?

3.28 (ccess the shared printer on 6I,+/6'?


IV& INSTALL AND CON4IGURE N4S?Net+or, 4ieS@te-&



18/48

O#$ECTIVES %

18 Install ,F' service

28 onfi$ure ,F' 'erver

38 onfi$ure ,F' client

%8 Test ,F'

Conte5t

ports

bC #00 the following line

/pth/to/shre ipLclientArwC< ipLclient%ArwC



19/48

38 0estart the ,F''erver

/etc/init.0/nfs strt or stop or relo0 or restrt

"L'$)* S'($

%8 From the clientside &

a8 rete a folder for a mountin$ operation

3k0ir /3nt/prtge

b8 )ount usin$ the command prompt&

3o2nt -t nfs ipLserve2r/pth/to/shre /3nt/prtge

c8 (utomatic mount at startup& 18 edit & "etc"fstab 28 (dd&

ipLserve2r/pth/to/shre /3nt/prtge nfs 2to


20/48

38 user access control %8 ou can force the use of some specificports&

Wor, to 3o in co--*n3 -o3e

!& N4S Ser1er%

reate a folder named 3oiern' in /6o-e et set read and write permissions to



21/48

two fedora computers on the ntewor#

e0it /etc/e>ports

00 the following

/ho3e/0ossiernfs ipLclientArwC< ipLclient%ArwC

2& N4S Cient %

a8 reate the folder "mnt"parta$enfs on the ,F' client

b8 (ccess to the shared folder 3oiern'usin$ the mount command&

3o2nt -t nfs ipLserve2r/ho3e/0ossiernfs /3nt/prtgenfs

c8 (dd the followin$ line to the "etc"fstab file for automatic mountin$ at startup &

ipLserve2r/ho3e/0ossiernfs /3nt/prtgenfs 2to


22/48

V % S0ARING AN INTERNET CONNEXION USINGIP MAS7UERADE

!& O#$ECTIVES %

18 onfi$ure a Linux computer with two ,Is28 'hare an Internet connexion

2& Conte5t %


23/48


24/48


25/48

VI& Int* *n3 con'i()re * ri-*r@ DNS Ser1er

Ojecti1e %

18 Install the +,' service28 onfi$ure the +,' service files for primar forward loo#up

38 onfi$ure the +,' service files for primar reverse loo#up

%8 'tart the primar server

;8 Test the primar server

98 reate forward and reverse loo#up one files

=8 Test other domain names

Conte5t %

The compan wants to perform name resolution and I! address resolution.


26/48

Ste %

!& 4ie to )e

/etc/named.conf File containin$ +,' server tpes& -*teror *1eor 'or+*r3

/var/named/named.ca File containin$ the root +,' 'ervers information

/var/named/votredomaine.com.db File containin$ the forward loo#up one/var/named/slaves/10.0.1.d xample of file containin$ the reverse loo#up one

for the 1..1. subnet

/etc/resolv.conf File containin$ the search domain path and the theI! addresses of the +,' servers to use

2& Ste *'ter #IND Ser1er 6* een int*e3 ?it j)t *n e5*-e&



27/48

a8 )a#e sure ou confi$ure static T! " I! settin$s for the Fedora server

F+, of the F+/0( computer I!")as#

+,'

b8 (dd the followin$ +,' addresses in the/etc/reo1.con' 'ie

n*-eer1er !92.!:;.!=.!

n*-eer1er !92.!:;.!=.2

c8 )odif the/etc/n*-e3.con' file

listen+on port ,- 1.0.0.23.45.,0.262

allow+7uerylocalhost2any262

d8 reate the terre1erte.netone usin$ tthe $raphical tool 7see thefollowin$ pa$es8. onfi$ure the AJ CNAMEJ MX records. Thereverse one and the PTRrecord are automaticall created.

Then5 chec# that the forward looup one file in1*r/n*-e3/terre1erte.net.3has benn created and the same forthe reverse loo#up one v*r/n*-e3/!92.!:;.!=..3file.

For the command line mode5 see the example bellow

e8 Test with noo,) +++.terre1erte.net*n3 @o) ot*in%

http://www.terreverte.net/http://www.terreverte.net/


28/48

Con'i()r*tion e5*-e

onfi$ure the "etc"named.conf file

(dd the master and forward and reverseloo#up ones

reate the "var"named"server.world.lan file forthe forward loo#up one



29/48

reate the "var"named"..1.db for thereverse loo#up one

"& DNS MASTER % co--*n3 -o3e

'T!' 0'LT'18 Installation

* root

y23 instll bin0 bin0-2tils

y23 instll syste3-config-bin0

28 onfi$urin$ a primar+,' and creation ofmaster forward andreverse loo#up ones

* root

Con'i()re t6e itenin(ort to e ="

/etc/n3e0.conf

options 8

listen+on port ,- 1.0.0.20.0..,262

allow+7uerylocalhost2any262r8pond 9 tout poste

D

Mone ;votre0o3ine.co3.; 'N 8

type 3ster9

file ;votre0o3ine.co3.0b;9

allow+transfer0.0..1262serveur slave

also+notify0.0..1262serveur slave

D9



30/48

allow+transfer0.0..1262

also+notify0.0..1262

to allow the :one transfer

for a slave ()S

Mone ;.!.!.in-00r.rp.; 'N 8 type 3ster9 file ;!.!..0b;9 allow+transfer 0.0..1262serveur slave also+notify 0.0..1262serveur slave

D9

38 Forward loo#up one fileexample

/var/named/votredomaine.com.db

$ORIGIN example.com.

$TTL 86400

@ IN SOA dns1.example.com. hostmaster.example.com. (

1 ; serial

21600 ; refresh after 6 hours

3600 ; retry after 1 hour

604800 ; expire after 1 week

86400 ; minimum TTL of 1 day

)

IN NS dns1.example.com.

IN NS dns2.example.com.

IN MX 10 mail.example.com. IN MX 20 mail2.example.com.

IN A 10.0.1.5

dns1 IN A 10.0.1.5

dns2 IN A 10.0.1.7

server1 IN A 10.0.1.1

server2 IN A 10.0.1.2

ftp IN CNAME server1

mail IN CNAME server1

www IN CNAME server2

%8 0evesre loo#up one fileexample

/var/named/0.0..db

$ORIGIN 1.0.10.in-addr.arpa.

$TTL 86400

@ IN SOA dns1.example.com. hostmaster.example.com. (

1 ; serial

21600 ; refresh after 6 hours

3600 ; retry after 1 hour

604800 ; expire after 1 week

86400 ; minimum TTL of 1 day

)

IN NS dns1.example.com. IN NS dns2.example.com.

1 IN PTR server1.example.com.

2 IN PTR server2.example.com.

5 IN PTR dns1.example.com.

7 IN PTR dns2.example.com.

;8 onfi$ure the +,' clientto use our own +,' for

/etc/resolv.conf



31/48

name resolutionn3eserver %*.!.!.

n3eserver !.!..&

98 start " stop the +,''erver

service n3e0 strt

service n3e0 stop

=8 0eload the +,' server rn0c relo0

>8 (utomatiJue startup ' chconfi! named on

C8 Test of the +,' server nslookup servername.domainname.com

dig servername.domainname.com

18hec# for errors in theconfi$ file

# vi /var/log/messages


32/48

c8 nter the one name51otre3o-*ine.co-.

+onAt for$et the dot . at the end of the

name then press

d8 nter the info about the +,' server

e8 (dd the followin$ one records &

AJ CNAMEJ MX

f8 (dd an A recor3



33/48

$8 (dd a CNAME recor3 h8 (dd a MXrecord

i8 'ave the modification

8 onfi$ure the +,' client to use ourown +,' for name resolution

Dvi "etc"resolv.conf

nameserver 12=...1

nameserver 1C2.19>.2.1#8 Test with noo,) +++.1oo1ert.net l8 If errors5 rechec# all the steps

=& Wor, to 3o in (r*6ic* -o3e%



34/48

18 onfi$ure a master forward and a reverse loo#up one forVELOVERT.NET *n3 #IXI.COM 3o-*in. reate the correspondin$records&

one VELOVERT.NET

A @o)r IP *33re

CNAME WWW.VELOVERT.NET

MX VOTRESERVER.VELOVERT.NET

one #IXI.COM

A @o)r IP *33re

CNAME WWW.#IXI.COM

MX VOTRESERVER.#IXI.COM

28 Test our +,' 'erver with noo,)



35/48

Faites vMrifier @@@@@@@@@@@

VII % INSTALLING AND CON4IGURING A SLAVE DNSSERVER



36/48

Ojecti1e %

18 Install +,' 'erver on another Fedora computer28 onfi$ure slave forward loo#up ones

38 'tart and test the secondar +,' 'erver

Conte5t%


37/48

slave +,'E3ite /etc/n*-e3.con'tpe slavePfile Rslaves"1..1.I,:(++0.(0!(.dbRPmasters O 1..1.; port ;3 QPQP

%8 0estart +,' 'erverD 'ervice named restart

;8 0eload +,' 'erver D rndc reload98 hec# if file transfer has occurred "var"named"slaves"votredomaine.com.db.=8 Test our server D nsloo#up votreserver.votredomaine.com

"& GRAP0ICAL MODE

".!& Con'i()r t6e MASTER DNS to *o+ one tr*n'ert 'or 'or+*3 *n3re1ere oo,) one

'tart sstem:confi$:bind

+ouble:clic# on the created one

'elect allow transfer and add it to the

current options allow:transfer

(dd the I! address of the 'L(- +,'

lic# on (dd



38/48

onfi$ure

(dd the I! address of the 'L(- +,'

(nd -alidate

0edo the same steps for the reverseloo#up one

allow:transfer O ip@+,'@'lave PQP

also:notifOip@+,'@'lave PQP

0estart the named service D service named restart

".2& Con'i()re t6e SLAVE DNS'or * 'or+*r3 oo,) one


lic# on new one

hoose 'L(- one tpe

nter the name of the master one andvalidate



39/48

nter the I! address of the master +,'

'ave the confi$uration

0estart the +,' 'erver D service named restart"."& Reo*3 t6e DNS Ser1er

he# if the one file has been created in/1*r/n*-e3/*1e

#rndc reload

"."& Con'i()re t6e SLAVE DNS'or * re1ere oo,) one



40/48


lic# on new one

hoose 'L(- one tpe

nter the name of the master one!=.!92.!:;.INADDR.ARPA.

and validate

nter the I! address of the master +,'

'ave the confi$uration

0estart the +,' 'erver D service named restart".


41/48

-erification& @@@@@@@@@@@



42/48

VIII % CON4IGURE AN APAC0E SERVER

O#$ECTIVES %

!& Install (!(H 'erver2& onfi$ure (!(H confi$uration files

"& Test a basic confi$uration of (!(H 'erver


43/48

extensions provided software using pache!

/vr/log/http0 Folder containing log files

/vr/log/http0/errorLlog "og containing all pages processed y the server

/vr/www Folder for the default site information/vr/www/cgi-bin n $empty% folder for scripts

/vr/www/error Folder containing error messages pages

/vr/www/ht3l n $&mplty% folder containing documents for the default site

/vr/www/icons Folder containing some icons/vr/www/3n2l Folder containing documentation

2& CON4IGURATION

A& Co--*n3 Mo3e

ETAPES RESULTATS18 Installation

y23 instll http0-3n2l

28 'tart " stop service http0 strt or stop or relo0

Or 2se the following co33n0

/sbin/service http0 strt or stop or relo0



44/48

38 (utomatic startup of the6tt3service chkconfig http0 on

%8 hec#in$ for sntax service http0 configtest

;8 Test our (pache 'erverusin$ localhost5 or our I!

(ddress or our domainname

http&""12=...1

98 onfi$urin$ a virtual site&site1

"o0ify the file

/etc/http0/conf/http0.conf

,rete the root fol0er

/vr/www/site

$et per3issions *&tollow everyone to e>ec2teyo2r web pges

Test yo2r virt2l sitewith 'REO

);*$


45/48

!& /pen the (!(H confi$urationtool &

'stem " administration " server parametersde "http

2& (dd the I! address and the port ofthe web site

"& Tunin$ HTT! 'erver performance


46/48

dit "etc"httpd"conf"6tt3.con'

)odif the sections

S-irtualHost

S"-irtualHost

)odif +ocument0oot

'pecif 'erver,ame

Note %

0edo for the same for all virtual sitesou plan to host

0estart httpdreate the index.html files for eachsite&

18 "var"www"html

28 "home"fedora"public@html

Test our web sites with firefox



47/48

Wor, to 3o %

CON4IGURING APAC0E SERVER IN CONSOLE MODE

!& se the 1eo1ert.netand i5i.co-ones created in the +,'

!) reate a 6* site for 666.-L/-0T.,T

'erver,ame www.velovert.net

+ocument0oot "var"www"html"velovert

") reate a virtual 6* site for 666.*I4I./)

'erver,ame www.bixi.com

+ocument0oot "var"www"html"bixi


48/48

=& Test our web sites 666.-L/-0T.,T and 666.*I4I./)


Documents

Linux Reseau Projet English