RH134 - ch08s02

In this lab, you will connect your desktopX system to become a client of the LDAP server running on classroom.example.com. You will configure your desktopX system to use the Kerberos infrastructure provided by classroom.example.com for additional authentication.

Resources:
Files:	`http://classroom.example.com/pub/example-ca.crt`
Machines:	`desktopX`

Outcomes:

desktopX configured for LDAP user information and Kerberos authentication from classroom.example.com.

Reset your desktopX system.

To simplify user management, your company has decided to switch to centralized user management. Another team has already set up all the required LDAP and Kerberos services. Centralized home directories are not yet available, so the system should be configured to create local home directories when a user first logs in.

Given the following information, configure your desktopX system to use user information from the LDAP server, and authentication services from the Kerberos KDC. DNS service records for the realm have not yet been configured, so you will have to configure Kerberos settings manually.

Name	Value
LDAP server	`ldap://classroom.example.com`
LDAP base DN	`dc=example,dc=com`
Use TLS	Yes
Root CA	`http://classroom.example.com/pub/example-ca.crt`
Kerberos realm	`EXAMPLE.COM`
Kerberos KDC	`classroom.example.com`
Kerberos admin server	`classroom.example.com`

Start by installing the necessary packages: sssd, krb5-workstation, and authconfig-gtk.
1. ```
[student@desktopX ~]$ sudo yum -y install sssd authconfig-gtk krb5-workstation
```
Launch the Authentication Configuration application, then apply the settings from the table for both LDAP and Kerberos options.
1. Either launch system-config-authentication from the command line, or launch Applications → Sundry → Authentication. Enter the student password (student) when asked.
2. Make sure the Identity & Authentication tab is open.
3. In the User Account Database, select LDAP.
4. Enter dc=example,dc=com in the LDAP Search Base DN field, and classroom.example.com in the LDAP Server field.
5. Make sure the Use TLS to encrypt connections box is checked, then click the Download CA Certificate... button.
6. Enter http://classroom.example.com/pub/example-ca.crt in the Certificate URL field, then click OK.
7. Select Kerberos password from the Authentication Method dropdown, and uncheck both Use DNS... boxes.
8. Enter EXAMPLE.COM in the REALM field, and classroom.example.com in both the KDCs and Admin Servers fields.
9. Switch to the Advanced Options tab and place a checkmark in the Create home directories on the first login box.
10. Click the Apply button to apply your changes.

Use both getent and ssh to verify your work. You can use the username ldapuserX (where X is your station number) with the password kerberos. Please note that your users will not yet have a home directory mounted.

[student@desktopX ~]$ getent passwd ldapuserX
ldapuserX:*:170X:170X:LDAP Test User X:/home/guests/ldapuserX:/bin/bash

[student@desktopX ~]$ ssh ldapuserX@localhost
The authenticity of host 'localhost (::1)' can't be established.
EDCSA key fingerprint is XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'localhost' (ECDSA) to the list of known hosts.
ldapuserX@localhost's password: kerberos
Creating home directory for ldapuserX.
[ldapuserX@desktopX ~]$ pwd
/home/guests/ldapuserX
[ldapuserX@desktopX ~]$ ls -a
.   .bash_history  .bash_profile  .cache   .mozilla
..  .bash_logout   .bashrc        .config
[ldapuserX@desktopX ~]$ logout

Discuss Red Hat System Administration II

Go to community

Is It possible to reset root password when the system is on multi-user.target?

jennifer1987

27 lip 2023

Hi thereWell, i have a question, Is It possible to reset root password when the system is on multi-user.target? I was not be able to found a foro o some information related with this and another question that I have, If the grub menu dont show up, is it posible to reset the root password?

991

Red Hat System Administration II (RH134)

Haley_Ruccio

21 lip 2023

Build the skills to perform the key tasks needed to become a full-time Linux administratorRed Hat System Administration II (RH134) is the second part of the RHCSA training track for IT professionals who have already attended Red Hat System Administration I. The course goes deeper into core Linux system administration skills in storage configuration and management, installation and deployment of Red Hat Enterprise Linux, management of security features such as SELinux, control of recurring system tasks, management of the boot process and troubleshooting, basic system tuning, and command-line automation and productivity. This course assumes that students have attended Red Hat System Administration I (RH124).Experienced Linux administrators who seek rapid preparation for the RHCSA certification should instead start with RHCSA Rapid Track (RH199).This course is based on Red Hat Enterprise Linux 9.0.Course summaryInstall Red Hat Enterprise Linux using scalable methodsAccess security files, file systems, and networksExecute shell scripting and automation techniquesManage storage devices, logical volumes, and file systemsManage security and system accessControl the boot process and system servicesRun containersAudience for this courseThis course is geared toward Windows system administrators, network administrators, and other system administrators who are interested in supplementing current skills or backstopping other team members, in addition to Linux system administrators who are responsible for these tasks:Configuring, installing, upgrading, and maintaining Linux systems using established standards and proceduresProviding operational supportManaging systems for monitoring system performance and availabilityWriting and deploying scripts for task automation and system administrationRecommended trainingSuccessful completion of Red Hat System Administration I (RH124) is recommended.Experienced Linux administrators seeking to accelerate their path toward becoming a Red Hat Certified System Administrator should start with the RHCSA Rapid Track course (RH199).Take our free assessment to gauge whether this offering is the best fit for your skills.Technology considerationsThere are no special technology requirements.This course is not designed for bring your own device (BYOD).Internet access is not required, but is recommended to allow students to research and access Red Hat online resources.

Welcome to the Red Hat System Administration II (RH134) group in the Red Hat Learning Community!

Deanna

18 lip 2023

We are excited to launch a space dedicated to the Red Hat Training course Red Hat System Administration II! To gain the most value from this group - click the "Join Group" button in the upper right hand corner.We encourage group members to collaborate in this group to discuss topics, ask questions, share best practices and tips, provide course feedback, and share their accomplishments as it relates to RH134.Read more about Red Hat System Administration II here.

417

Revision: rh134-7-c643331