RHCSA Rapid Track
Course update
An updated version of this course is available that uses a newer version of Red Hat Enterprise Linux in the lab environment. Therefore, the RHEL 9.0 version of the lab environment will retire on December 31, 2024. Please complete any work in this lab environment before it is removed on December 31, 2024. For the most up-to-date version of this course, we recommend moving to the RHEL 9.3 version.
In this lab, you change the time zone on an existing server and configure a new log file for all events for authentication failures.
Outcomes
Update the time zone on an existing server.
Configure a new log file to store all messages for authentication failures.
As the student user on the workstation machine, use the lab command to prepare your system for this exercise.
This command prepares your environment and ensures that all required resources are available.
[student@workstation ~]$ lab start logs-review
Instructions
Log in to the
serverbmachine as thestudentuser.Pretend that the
serverbmachine is relocated to Jamaica and that you must update the time zone toAmerica/Jamaica. Verify that you correctly set the appropriate time zone.Select the appropriate time zone for Jamaica.
[student@serverb ~]$
tzselectPlease identify a location so that time zone rules can be set correctly. Please select a continent, ocean, "coord", or "TZ". 1) Africa 2) Americas 3) Antarctica 4) Asia 5) Atlantic Ocean 6) Australia 7) Europe 8) Indian Ocean 9) Pacific Ocean 10) coord - I want to use geographical coordinates. 11) TZ - I want to specify the timezone using the Posix TZ format. #?2Please select a country whose clocks agree with yours. 1) Anguilla 19) Dominican Republic 37) Peru 2) Antigua & Barbuda 20) Ecuador 38) Puerto Rico 3) Argentina 21) El Salvador 39) St Barthelemy 4) Aruba 22) French Guiana 40) St Kitts & Nevis 5) Bahamas 23) Greenland 41) St Lucia 6) Barbados 24) Grenada 42) St Maarten (Dutch) 7) Belize 25) Guadeloupe 43) St Martin (French) 8) Bolivia 26) Guatemala 44) St Pierre & Miquelon 9) Brazil 27) Guyana 45) St Vincent 10) Canada 28) Haiti 46) Suriname 11) Caribbean NL 29) Honduras 47) Trinidad & Tobago 12) Cayman Islands 30) Jamaica 48) Turks & Caicos Is 13) Chile 31) Martinique 49) United States 14) Colombia 32) Mexico 50) Uruguay 15) Costa Rica 33) Montserrat 51) Venezuela 16) Cuba 34) Nicaragua 52) Virgin Islands (UK) 17) Curaçao 35) Panama 53) Virgin Islands (US) 18) Dominica 36) Paraguay #?30The following information has been given: Jamaica Therefore TZ='America/Jamaica' will be used. Selected time is now: Wed Mar 16 07:17:15 EST 2022. Universal Time is now: Wed Mar 16 12:17:15 UTC 2022. Is the above information OK? 1) Yes 2) No #?1You can make this change permanent for yourself by appending the line TZ='America/Jamaica'; export TZ to the file '.profile' in your home directory; then log out and log in again. Here is that TZ value again, this time on standard output so that you can use the /usr/bin/tzselect command in shell scripts: America/JamaicaElevate the
studentuser privileges to update the time zone of theserverbserver toAmerica/Jamaica.[student@serverb ~]$
sudo timedatectl set-timezone America/Jamaica[sudo] password for student:studentVerify that you successfully set the time zone to
America/Jamaica.[student@serverb ~]$
timedatectlLocal time: Wed 2022-03-16 07:18:40 EST Universal time: Wed 2022-03-16 12:18:40 UTC RTC time: Wed 2022-03-16 12:18:40Time zone: America/Jamaica (EST, -0500)System clock synchronized: yes NTP service: active RTC in local TZ: no
View the recorded log events in the previous 30 minutes on the
serverbmachine.Determine the time frame to view the journal entries.
[student@serverb ~]$
dateWed Mar 16 07:19:29 AM EST 2022 [student@serverb ~]$date -d "-30 minutes"Wed Mar 16 06:49:38 AM EST 2022View the recorded log events in the previous 30 minutes on the
serverbmachine.[student@serverb ~]$
journalctl --since...output omitted... Mar 16 07:10:58 localhost kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Mar 16 07:10:58 localhost kernel: found SMP MP-table at [mem 0x000f5bd0-0x000f5bdf] Mar 16 07:10:58 localhost kernel: Using GB pages for direct mapping Mar 16 07:10:58 localhost kernel: RAMDISK: [mem 0x2e0d9000-0x33064fff] Mar 16 07:10:58 localhost kernel: ACPI: Early table checksum verification disabled Mar 16 07:10:58 localhost kernel: ACPI: RSDP 0x00000000000F5B90 000014 (v00 BOCHS ) Mar 16 07:10:58 localhost kernel: ACPI: RSDT 0x000000007FFE12C4 00002C (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001) Mar 16 07:10:58 localhost kernel: ACPI: FACP 0x000000007FFE11D0 000074 (v01 BOCHS BXPCFACP 00000001 BXPC 00000001) Mar 16 07:10:58 localhost kernel: ACPI: DSDT 0x000000007FFDFDC0 001410 (v01 BOCHS BXPCDSDT 00000001 BXPC 00000001) lines 1-50/5006:49:00--until07:19:00q[student@serverb ~]$
Create the
/etc/rsyslog.d/auth-errors.conffile. Configure thersyslogservice to write theLogging test authpriv.alertmessage to the/var/log/auth-errorsfile. Use theauthprivfacility and thealertpriority.Create the
/etc/rsyslog.d/auth-errors.conffile and specify the new/var/log/auth-errorsfile as the destination for authentication and security messages.authpriv.alert /var/log/auth-errors
Restart the
rsyslogservice to apply the configuration file changes.[student@serverb ~]$
sudo systemctl restart rsyslogUse the
logger -pcommand to write theLogging test authpriv.alertmessage to the/var/log/auth-errorsfile. Use theauthprivfacility and thealertpriority.[student@serverb ~]$
logger -p authpriv.alert "Logging test authpriv.alert"Verify that the
/var/log/auth-errorsfile contains the log entry with theLogging test authpriv.alertmessage.[student@serverb ~]$
sudo tail /var/log/auth-errorsMar 16 07:25:12 serverb student[1339]:Logging test authpriv.alertReturn to the
workstationsystem as thestudentuser.[student@serverb ~]$
exitlogout Connection to serverb closed. [student@workstation ~]$
This concludes the section.