Assignment 1: The Set up

Updating and initial configuration for server-05

Finally, you will have to adapt again your initial VM to turn it into a secure mail server. So, carry out the required tasks as follows:

1. First, update the system from debian repositories.

2. Install additional software:

   • Text editor: vim

   • Text paginator: less

   • Sync tool: rsync

   • Web download tool: wget

   • Monitor and config tool: htop, net-tools, resolvconf

   • Software build package: build-essential

   • Additional (extra) system manuals: manpages-es-extra

3. Configure the next features

   • Fix the local timezone:

     • Europe/Madrid

   • Set the root password (1)

4. Allow ssh login for the root user (password)

5. Then, you will have to adapt your new instance to turn it into a secure mail server. So, carry out the tasks required as follows:

   • Hostname: server-05

   • Local name resolution:

     • Hostname: server-05.localdomain

     • Alias: server-05

   More details in references [12][13]

In GCP, every time we start a virtual instance, the /etc/hosts file is updated by services that google has created in it. To include the name resolution information for our environment, either we create a custom service that runs after the startup and loads that information from a particular file (for example), or we patch (carefully) the google service to do that.

Also, you have to configure server-05 as client of primary service supplied by server-01 (lab 1), except NFS:

• NTP Client: Time (date) of our file server should be automatically synchronized by NTP service using these references:

  • server-01.localdomain

• DNS client: Add server-01 as secondary DNS for your server and localdomain as search domain. Make sure that the DNS Server (BIND9) deployed in Lab1 has a MX record for the mail server server-05.localdomain, according to the authoritative zone localdomain.

• LDAP (NSS) client: Our new server will be able to use the LDAP directory in a safe way (SSL) to identify (2) users who are managed by LDAP on server-01/server-02.

• NFS client: Configure server-05 as NFS client of server-03:

  • server-05 should mount /export/home from server-03 on the local directory /remote/home. Take all necessary actions to make it permanent.

(1) Use a strong password

(2) It is not necessary for users to be able to connect, in this case, to server-03 by SSH (PAM)