Assignment 1: The Set up

Updating and initial configuration for server-03

You will have to adapt your initial VM to turn it into a secure file server. So, carry out the required tasks as follows:

1. First, update the system from debian repositories.

2. Install additional software:

   • Text editor: vim

   • Text paginator: less

   • Sync tool: rsync

   • Web download tool: wget

   • Monitor and config tool: htop, net-tools, resolvconf

   • Software build package: build-essential

   • Additional (extra) system manuals: manpages-es-extra

3. Configure the next features:

   • Fix the local timezone:

     • Europe/Madrid

   • Set the root password (1)

4. Allow ssh login for the root user (password)

5. You have to configure server-03 as client of primary service supplied by server-01 (lab 1), except NFS:

   • NTP Client: Time (date) of our file server should be automatically synchronized by NTP service using these references:

     • server-01.localdomain

   • DNS client: Add server-01 as secondary DNS for your server and localdomain as search domain.

   • LDAP (NSS) client: Our new server will be able to use the LDAP directory in a safe way (SSL) to identify (2) users who are managed by LDAP on server-01/server-02.

   • Additionally, modify the $HOME attribute to every user entry in LDAP directory:

     • New value: /remote/home/$USERNAME

6. Build a secondary storage system for server-03 using the following design:

   

   • 3 disks (/dev/sd{b,c,d})

   • 2 partitions per disk, with equal size.

   • 2 RAID devices configured in RAID5 mode

     • md0 --> /dev/sd{b1,c1,d1}

     • md1 --> /dev/sd{b2,c2,d2}

   • LVM group volume vg0, using as physical volumes the RAID devices.

   • 3 logical volumes:

     • server-03-home --> 10 GB

     • server-03-scratch --> 2 GB

     • server-03-smb --> 6 GB

7. Make the following file systems on each logical volume:

   • server-03-home --> ext4

   • server-03-scratch --> xfs

   • server-03-smb --> ext4

8. Configure the system to mount these file systems permanently on the following directories:

   • server-03-home --> /export/home

   • server-03-scratch --> /export/scratch

   • server-03-smb --> /export/samba

   • Mount options:

     • noatime,nodiratime,errors=remount-ro (3)

     • no dumps

     • no checks

9. Change the access rights of /export/samba and /export/scratch so that everybody can read and write on them.

(1) Use a strong password

(2) Only identification, not authenticatio. We can use idmapd service instead.

(3) Only for ext4