Rhce Exam-Certcollection
Rhce Exam-Certcollection
Page 1 of 4
1) Configure selinux.
- Configure your systems that should be running in Enforcing.
# vim /etc/selinux/config
SELINUX=enforcing
2) Configure repository.
- Create a Repository for your virtual machines. The URI is
http://station.network0.example.com/content/rhel7.0/x86_64/dvd
(http://station.network0.example.com/content/rhel7.0/x86_64/dvd)
# vim /etc/yum.repos.d/local.repo
[localrepo]
name = Local Repo for RHCE Exam
baseurl = http://station.network0.example.com/content/rhel7.0/x86_64/dvd
gpgcheck = 0
enabled = 1
3) SSH configuration.
- Configure SSH access on your virtual hosts as follows.
- Clients within my22ilt.org should NOT have access to ssh on your systems
# vim /etc/hosts.deny
sshd: .my22ilt.org
firewall-cmd --add-rich-rule='rule family="ipv4" source address="172.25.1.0/24" forward-port port="5423" protocol="tcp" to-port="80"' --permanent
firewall-cmd --reload
vim /etc/bashrc
source /etc/bashrc
On ServerX:
nmcli conn show ----> to find the connection name that attaches to the eth0 interface
On DesktopX:
nmcli conn show ----> to find the connection name that attaches to the eth0 interface
On ServerX:
ping6 -I eth0 ddb:fe2a:ab1e::c0a8:02
On DesktopX:
ping6 -I eth0 fddb:fe2a:ab1e::c0a8:64
7) Link aggregation
- Configure your serverX and desktopX, which watches for link changes and selects an active port for
data transfers.
- serverX should have the address as 192.168.X.10/255.255.255.0.
- desktopX should have the address as 192.168.X.11/255.255.255.0.
(Note: where X is your station number)
On Server Machine:
nmcli con add type team con-name Team1 ifname Team1 config '{"runner": {"name": "activebackup"}}'
nmcli con modify Team1 ipv4.addresses 192.168.1.10/24
nmcli con modify Team1 ipv4.method manual
nmcli con add type team-slave con-name Team1-slave1 ifname eth1 master Team1
nmcli con add type team-slave con-name Team1-slave2 ifname eth2 master Team1
On Desktop Machine:
nmcli con add type team con-name Team1 ifname Team1 config '{"runner": {"name": "activebackup"}}'
nmcli con modify Team1 ipv4.addresses 192.168.1.11/24
nmcli con modify Team1 ipv4.method manual
nmcli con add type team-slave con-name Team1-slave1 ifname eth1 master Team1
nmcli con add type team-slave con-name Team1-slave2 ifname eth2 master Team1
8) SMTP Configuration.
- Configure the SMTP mail service on serverX and desktopX which relay the mail only from local
system through station.network0.example.com, all outgoing mail have their sender domain as
example.com. Ensure that mail should not store locally.
- Verify the mail server is working by sending mail to a natasha user.
- Check the mail on both serverX and desktopX with the below URL
http://station.network0.example.com/system1 (http://station.network0.example.com/system1)
http://station.network0.example.com/system2 (http://station.network0.example.com/system2)
vim /etc/postfix/main.cf
inet_interfaces = loopback-only
mydestination =
myorigin = example.com
mynetworks = 127.0.0.0/8, [::1]/128
relayhost = [station.network0.example.com]
local_transport = error: local delivery disabled
mkdir –p /nfsshare
chmod 0777 /nfsshare
vim /etc/exports
/nfsshare *.example.com(rw)
mkdir –p /nfssecure
wget –O /etc/krb5.keytab http://station.network0.example.com/pub/keytabs/serverX.keytab
vim /etc/sysconfig/nfs
RPCNFSDARGS="-V 4.2"
mkdir /nfssecure/protected
vim /etc/exports
/nfssecure *.example.com(rw,sec=krb5p,sync)
exportfs -r
mkdir –p /public
vim /etc/fstab
mkdir –p /secure/protected
vim /etc/fstab
mkdir -p /sambadir
vim /etc/samba/smb.conf
workgroup = TESTGROUP
[data]
comment = data share
path = /sambadir
browseable = yes
valid users = susan
read only =yes
hosts allow = 172.25.1. #(ifconfig and get your ip and only use the 3 octets)
mkdir –p /opstack
vim /etc/samba/smb.conf
[cluster]
comment = opstack share
path = /opstack
write list = frankenstein
writable = no
smbpasswd –a Frankenstein
smbpasswd –a martin
#Allow Frankenstein write access & Martin read access to the directory
[indent=1]1) setfacl -m u:frankenstein:rwX /opstack/[/indent]
[indent=1]2) setfacl -m u:frankenstein:r-X /opstack/
[/indent]
mkdir –p /mnt/smbspace
vim /root/smb-multiuser.txt
username=frankenstein
password= SaniTago
vim /etc/fstab
13) Webserver.
- Implement a webserver for the site http://serverX.example.com (http://serverX.example.com)
- Download the webpage from http://station.network0.example.com/pub/rhce/rhce.html
(http://station.network0.example.com/pub/rhce/rhce.html)
- rename the downloaded file in to index.html.
- copy the file into the document root.
- Do not make any modification with the content of the index.html.
- Clients within my22ilt.org should NOT access the webserver on your systems
wget http://station.network0.example.com/pub/rhce/rhce.html
mv rhce.html /var/www/html/index.html
cd /etc/httpd/conf.d/
vim server1.conf
<VirtualHost *:80>
ServerAdmin webmaster@server1.example.com
ServerName server1.example.com
DocumentRoot /var/www/html
CustomLog "logs/server1_access_log" combined
ErrorLog "logs/server1_error_log"
</VirtualHost>
<Directory "/var/www/html">
<RequireAll>
Require all granted
Require not host my22ilt.org
</RequireAll>
</Directory>
wget http://classroom.example.com/pub/rhce/tls/certs/system1.network1.crt
wget http://classroom.example.com/pub/rhce/tls/private/system1.network1.key
wget http://classroom.example.com/pub/example-ca.crt
mv system1.network1.crt /etc/pki/tls/certs/
mv system1.network1.key /etc/pki/tls/private/
mv example-ca.crt /etc/pki/tls/certs/
vim /etc/httpd/conf.d/server1.conf
<VirtualHost *:443>
ServerName server1.example.com
DocumentRoot /var/www/html
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
#SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt
</VirtualHost>
vi /etc/httpd/conf.d/server1.conf
(Add this)
<Directory "/var/www/html/owndir">
AllowOverride None
Require all Denied
Require local
</Directory>
cd /usr/local/vhosts
mkdir /usr/local/vhosts
cd /usr/local/vhosts
wget http://station.network0.example.com/pub/rhce/vhost.html
mv vhost.html index.html
vim /etc/httpd/conf.d/vhosts.conf
<VirtualHost *:80>
ServerAdmin webmaster@vhosts1.example.com
ServerName vhosts1.example.com
DocumentRoot /usr/local/vhosts
CustomLog "logs/vhosts_access_log" combined
ErrorLog "logs/vhosts_error_log"
</VirtualHost>
<Directory "/usr/local/vhosts">
AllowOverride None
# Allow open access:
Require all granted
</Directory>
mkdir –p /var/www/scripts
cd /var/www/scripts
wget http://classroom.example.com/pub/webapp.wsgi
restorecon –Rv /var/www/scripts
vim /etc/httpd/conf/httpd.conf
Listen 8961
vim /etc/httpd/conf.d/wsgi1.conf
<VirtualHost *:8961>
ServerAdmin webmaster@wsgi1.example.com
ServerName wsgi1.example.com
DocumentRoot /var/www/scripts # We don’t need it,only testing
WSGIScriptAlias / /var/www/scripts/webapp.wsgi
CustomLog "logs/wsgi_access_log" combined
ErrorLog "logs/wsgi_error_log"
</VirtualHost>
<Directory "/var/www/scripts">
AllowOverride None
# Allow open access:
Require all granted
</Directory>
18) Script1
- create a script on serverX called /root/random with following details.
- When run as /root/random postconf, should bring the output as "postroll"
- When run as /root/random postroll, should bring the output as "postconf"
- When run with any other argument or without argument,
should bring the stderr as "/root/random postconf|postroll"
vim /root/random
#!/bin/bash
case $@ in
postconf)
echo "postroll"
;;
postroll)
echo "postconf"
;;
*)
echo "/root/random postconf|postroll"
;;
esac
chmod +x /root/random
20) Script2
- Create a script on serverX called /root/createusers
- When this script is called with the argument, it should add all the users from the file
- Download the file from http://station.network0.example.com/pub/testfile
(http://station.network0.example.com/pub/testfile)
- All users should have the login shell as /bin/false, password not required.
- When this script is called with anyother argument, it should print the message as "Input File Not
Found"
- When this script is run without any argument, it should display "Usage: /root/createusers"
- NOTE: If the users are added no need to delete.
cd /root
wget [url="http://station.network0.example.com/pub/testfile"]http://station.network0.example.com/pub/testfile[/url]
vim /root/createusers
#!/bin/bash
a=''
case $@ in
testfile)
for user in $(cat $1);do
echo "Adding this user:" $user
useradd -s /bin/false $user
done
;;
$a)
echo "Usage: /root/createusers"
;;
*)
echo "Input File Not Found"
;;
esac
chmod +x /root/createusers
#targetcli
vim /etc/iscsi/initiatorname.iscsi
InitiatorName=iqn.2014-11.com.example:desktop1
Verification:
iscsiadm –m session –P 3 (it should show the State: running)
lsblk
fdisk /dev/sdb
Create the partition of 800M
mkfs.xfs /dev/sdb1
mkdir –p /mnt/initiator
mount /dev/sdb1 /mnt/initiator
blkid /dev/sdb1
vim /etc/fstab
cd /mnt/initiator
wget http://station.network0.example.com/pub/iscsi.txt
chown root iscsi.txt
chmod 0644 iscsi.txt
23) Mariadb
(We don’t need to open firewall port because it says that only access from localhost)
mysql_secure_installation
wget http://classroom.example.com/pub/rhce/backup.mdb
mysql –u root –p
CREATE DATABASE Contacts;
CREATE USER andrew@localhost IDENTIFIED BY 'Postroll';
GRANT SELECT ON Contacts.* TO andrew@localhost;
Thank's
Thanks for your post, Can I ask what was your study materials for the exam?
Also, all your answers seem to be perfect.where do you think you lost the points ? You should have got 300/300.
Result: PASS
* Mariadb
- Configure mariadb on serverX,
- On serverX, mariadb has corrupted due to some issues.
anyhow you have the logical backup file http://station.network0.example.com/pub/rhce/backup.mdb
(http://station.network0.example.com/pub/rhce/backup.mdb)
- Install a new mariadb server and restore the database from the above provided file.
- Create a database called student
- A new ticket has been assigned to you to create new remote access accounts
with the following information.
karthi
localhost
karthi_password
select on user_details table from student database
* Mariadb Query.
- Enter a correct username where host=172.25.0.% from the table "user_details"
I have one question to the Exam itself where i didn't found an answer. When already hold an valid RHCE for Version 6
do i need to take the RHCSA for Version 7 as well or can i directly upgrade?
I have one question to the Exam itself where i didn't found an answer. When already hold an valid RHCE for Version 6 do i need to
take the RHCSA for Version 7 as well or can i directly upgrade?
You can take directly RHCE version 7, if you hold a vlaid RHCE6
@riot
If you have a valid RHCE v6, you can give an upgrade exam. But do it quickly, I think last dates are very near.
Hello
Question number 13
Why did you use conf.d directory. I think this can be write to httpd.conf file.
Why did you change log path ?
CustomLog "logs/server1_access_log" combined
ErrorLog "logs/server1_error_log"
Question number 4
firewall-cmd --reload