LinuxCBT Classic Edition Price: $695 License: Site License System Requirements: Any Operating System Duration: 75 hours/375+ Videos on 1-DVD & Online
Overview
Traditional training outlets do not compare because they tend to deliver canned certification courses, which means little to serious IT-professionals and savvy hiring managers. Our Linux training solution, LinuxCBT, is unparalleled in content, depth and expertise. LinuxCBT prepares you or your organization for successfully deploying and managing business-critical RedHat® Linux-based desktop and server solutions. Let LinuxCBT teach you what traditional training outlets and other CBTs do not; real RedHat® Linux skills!
LinuxCBT Classic Edition includes both Client Management and Server Management Components.
Recommended Prerequisites:
* Open mind & determination to master Linux and related open-source applications * Basic MS Windows skills * Basic understanding of networking concepts * Access to a spare PC to perform all of the installations and exercises in LinuxCBT Classic Edition
* Introduction to the GNU/Linux operating system - Basics o Discussion of the Free Software Foundation's efforts to deliver ubiquitous UNIX! o Emphasize the role and importance of the GNU project o Identification of various Linux distributors including Debian, Mandrake, RedHat®, etc. o Introduction to the widely-used RedHat® Linux distribution o Explore Linux system documentation (man, info, GNOME, etc.) o Explain the Filesystem Hierarchy Standard (FHS) - UNIX is one big directory! o Explore the Linux file system o Identify the various interfaces to Linux o Discuss the role and release rules of the Linux Kernel o Demonstrate usage of file & directory tools (pwd, ls, cd, touch, cp, mkdir, mv, rm, which, rpm) o Basic BASH shell navigation & PATH & variable manipulation (set,unset,env,export,etc.) o Explore usage of common user-tools (cat, echo, find, locate) o Demonstrate typical usage of vi/vim ASCII text editors o Installation & implemenation of pine mail reader and pico text editor o Demonstrate typical usage of the king of all UNIX/Linux editors; EMACS o Explain & demonstrate standard in, standard out, redirection & pipes o Demonstrate usage of backup/restore tools (tar, gzip, gunzip) o Identify basic utilities and package memberships o Demonstrate usage of system monitoring tools (uptime, free, top, vmstat, meminfo, cpuinfo, ps, kill,
watch) o Identify the various types of files on Linux systems o Identify Filesystem tools (fsck, fdisk, mkfs, parted) o Mounting/unmounting basic Linux floppy, CD & ISO files o Identification of major online open source repositories (sourceforge, freshmeat, etc.)
* Perform client Installations - Disc 2 o Planning the installation - identify software, hardware requirements & disk partitioning defaults o Demonstrate complete upgrade o Demonstrate complete client installation from bootable CD o Create network-based source-tree on a centralized server for installation o Prepare for network-based FTP installation - create bootable media/obtain patches/etc. o Demonstrate complete client installation from FTP server o Prepare for network-based Kickstart automated installation via Network File System (NFS) o Create Kickstart installation source tree o Perform Kickstart automated installation via NFS
* Post client installation acclimation, exploration and configuration - Disc 3 o Discuss X-Windows client/server concepts, applications & security o Learn how to configure X-Windows to support your hardware o Discussion of window managment concepts and applications o Customize desktop environment for GNOME & usage o Customize desktop environment for KDE & usage o Explore the shell interface including common tools, utilities, semantics, etc. o Implement Mozilla web browser o Confiure the Java JRE as a plug-in for the Mozilla web browser and evaluate results o Implement Java Runtime Environment (JRE/J2SE) for system-wide access to Java applets/etc. o Implement Macromedia Flash plug-in and configure support in Mozilla and evaluate results o Download & Install Netscape web browser o Configure Java & Flash support for Netsacpe and evaluate results o Implement Ximian Evolution POP3/IMAP/Microsoft Exchange email client o Implement & explore RDESKTOP terminal services desktop connectivity to Windows 2003/2000/XP servers
running Remote Desktop Protocol (RDP) o Demonstrate typical RDESKTOP Windows usage for productivity, multitasking and connectivity o Upgrade RDESKTOP to version 1.3.1 & Remove RDESKTOP 1.2.x o Demonstrate some of the new capabilities of RDESKTOP 1.3.x o Troubleshoot common X-Windows and client-related problems o Implement AT&T's VNC server screen emulation program for multiple remote desktop access
* Linux client network administration essential concepts and applications - Disc 4 o User and group creation & management concepts - passwd, shadow, group, gshadow files o Compile and install John The Ripper Password Cracking tool o Validate password integrity with John The Ripper Password Cracking Tool o Explain UNIX/Linux file security & permissions (-rwxrwxrwx/777) rules & concepts o Discuss and demonstrate the client/server paradigm and distributed computing concepts o Identify & demonstrate usage of common client/server tools(SSH/HTTP/FTP/IMAP/POP3/SAMBA/etc.) o Demonstrate LFTP (Sophisticated FTP Client Software) usage o Use LFTP to connect to FTP & HTTP servers o Use LFTP to recover broken uploaded/downloaded transmissions o Use LFTP to mirror & reverse mirror the content of local and remote servers o Linux networking primer - Identify key Linux networking components o Implement DHCP IP addressing with Cisco PIX Firewall DHCP Server integration o Configure Linux client for DHCP configuration from a Cisco PIX firewall o Configure Linux client with static TCP/IP parameters for network communication o Test network connectivity internally and externally via ICMP & TCP-Port querying methodologies o Explore all graphical redhat-* & redhat-config-* configuration tools o Configure Network Time Protocol (NTP) via GUI & Shell interface to perform time synchronization o Discuss and implement Samba(SMB) connectivity to Windows 2003 Server o Implement client printing services via Common UNIX Printing System (CUPS) to Windows 2003 Server & HP
JetDirect-enabled printer. o Discuss and implement NFS connectivity to Linux hosts and Windows 2003(NFS) o Evaluate RedHat® Package Manager (RPM) to add/upgrade/remove applications o Discuss & demonstrate Backup & Restoration procedures o Discuss scenarios and create Linux Rescue disk for emergency system recovery
LinuxCBT Classic Edition Server Installations - Discs 5
* Perform Server Installations of RedHat® Linux - Module 5 o Prepare for server installation - verify system BIOS parameters/support o Demonstrate complete server installation from bootable CD-ROM o Demonstrate creation of installation source tree for network-based installations o Demonstrate complete server installation from an Apache HTTP Web server o Demonstrate complete custom server installation from HTTP Windows 2003 IIS server o Demonstrate complete custom server installation from FTP server o Demonstrate complete custom server installation from NFS server o Prepare for an automated Kicstart installation - identify requirements o Demonstrate complete server Kickstart automated installation from HTTP Apache Web server o Demonstrate complete server Kickstart automated installation from FTP Apache Web server o Connect system via serial communications to Sun Fire V100 SPARC box o Recap installation methods including caveats
LinuxCBT Classic Edition Server Management - Module 6
* Linux Systems Management Concepts & Applications - Disc 6 o Explain Linux Boot process and contrast boot managers - GRUB & LILO o Discuss the role of the init grandfather process and illustrate logical boot flow o Explain and demonstrate Runlevel (0 - 6) concepts & applications o Demonstrate Daemon/Service management with (chkconfig/ntsysv/redhat-config-services) o User profile implementation logic and concepts - (Bash profile/etc/skel/aliases/PATH/etc.) o Quota management - user-based, group-based and disk-based quota implementation o Introduce, partition using FDISK and create an EXT3 journaling file system of 100GB of additional system
storage. Identify paritions in /proc virtual file system.
* Discuss RedHat® Package Manager (RPM) concepts, features and applications o Demonstrate usage of RPM to ascertain available packages o Demonstrate usage of RPM to import public keys of package publishers o Demonstrate usage of RPM to verify the integrity of downloaded packages o Demonstrate usage of RPM to add new packages locally o Demonstrate usage of RPM to add new packages from a Windows 2003 FTP server o Demonstrate usage of RPM to add new packages from an HTTP server o Demonstrate usage of RPM to upgrade packages o Demonstrate usage of RPM to freshen packages o Demonstrate usage of RPM to remove packages
* Introduction to SYSLOG concepts o Explanation of syslog facilities & levels o Demonstrate syslog administration o Demonstrate Cisco to Linux SYSLOG functionality o Discuss & demonstrate automatic log rotation and customization
* Kernel Management o Demonstrate Linux Kernel upgrade procedures o Use RPM to install multiple kernels and verify functionality o Use RPM to remove outdated kernels
* Linux Network Administration Essentials - Module 7 o Discuss & demonstrate the usage of commonly used networking tools: o PING - Demonstrate PING flooding of remote hosts - ICMP Attack Techniques o PING - Cisco PIX Integration & Debugging of ICMP Echo Requests/Echo Replies o Traceroute - Cisco PIX Integration & provisioning of ICMP traffic types o MTR (PING & Traceroute functionality) plus Cisco PIX debugging of ICMP data flow o ARP o NETSTAT/LSOF o IFCONFIG o Route o DIG & NSLOOKUP o Whois o Who, w, wc, last, cat, grep, vi, pico, head, tail, etc. o Message of the day banners (MOTD), /etc/issue file (pre-login banner/display info.)
* Implement Dynamic Host Configuration Protocol (DHCP) services o Explain the various steps of the DHCP process o Configure global & scope-level DHCP options o Configure IP reservations based on layer 2 MAC addresses o Disable Cisco PIX DHCP services o Enable Linux DHCP services o Configure Windows 2003/XP/Linux clients to receive dynamic addresses from Linux
* Discuss Xinetd super server concepts and applications o Identify services controlled by Xinetd o Enable & disable Xinetd-controlled services & examine results o Implement access control on Xinetd controlled services o Implement Xinetd IP and port-level daemon redirection o Discuss Xinetd & TCP Wrappers relationship and dual-layer security benefits
* Implement Very Secure VSFTPD File Transfer Protocol (FTP) services o Implement anonymous FTPD o Implement user-level FTPD access o Implement FTPD banners o Disable anonymous access o Configure VSFTPD to run under the auspices of Xinetd super server for increased security o Implement bandwidth rate-limiting to control bandwidth usage
* Discuss Linux & Windows Integration via Samba o Install Samba support o Install Samba Web-based Administration Tool (SWAT) o Configure Samba file & print sharing o Evaluate access to Samba file & print server o Configure Samba Windows Internet Name Server (WINS) support o Evaluate Windows XP/2003 client access to Samba-WINS server
* Discuss the Network File System (NFS) concepts and Linux support o Implement the NFS daemon o Review /etc/exports parameters and options o Evaluate access to NFS exports o Implement NFS connectivity across a WAN connection via IPSEC VPN-connectivity
* Discuss the CRON scheduling system concepts and application o Identify various predefined CRON entries and schedules o Define custom cron jobs system-wide o Define custom cron jobs user-wide o Evaluate results of cron jobs
* Implement the Berkeley Internet Daemon (BIND) Domain Name Server (DNS) o Implement BIND 9.x o Configure BIND as a caching-only DNS server o Test caching-only name resolution from Windows 2003 & Linux hosts o Secure access to caching-only/recursive name server via ACLs o Configure BIND as a primary DNS server o Test primary name resolution from Windows 2003 & Linux hosts o Configure BIND as a secondary(slave) DNS server o Restrict communications between primary & secondary DNS servers o Implement updates between master and secondary DNS servers via IPSEC VPN o Configure DNS zones on Linux BIND & Windows 2003 DNS - activate replication o Implement poor man's load balancing using DNS round robin o Evaluate results of BIND configuration using DIG o Configure DNS zones o Configure zone transfers o Configure secure-zone transfers o Evaluate BIND's configuration files named.conf & named.custom o Configure BIND sub-domain delegation. i.e. internal.linuxcbt.net o Configure BIND to support reverse domains o Configure Linux/Windows 2003 clients to use Linux BIND DNS server o DNS Transaction Signatures (TSIG) implemenation o Identify BIND logging information for troubleshooting purposes o Configure BIND DNS with IP Aliasing (Sub-Interfaces) to host DNS on separate IP address
* Implement Network Monitoring & Graphing tools using SNMP, etc. o Implement Multi Router Traffic Grapher (MRTG) o Graph Cisco Firewall with MRTG o Implement Cacti Network Graphing Tool o Download and Install Cacti and required components (RRDTool, MySqL, etc.) o Explore Cacti Interface, options, etc. o Graph Cisco, Linux & Windows 2003 resources with Cacti using SNMP & Scripts
* Implement Network Time Protocol (NTP) & Time Synchronization services for local subnets o Discuss features and distributed nature of the hierarchial NTP service o Ascertain and select optimal Stratum 1 NTP servers for synchronization o Review default NTP configuration o Configure NTP to synchronize with NTP servers o Configure internal Linux clients to syncrhonize with internal Stratum 2 NTP server o Configure Cisco PIX firewall to synchronize with internal Stratum 2 NTP server o Use NTP-related tools such as NTPQ, NTPTRACE to ascertain NTP-related information
LinuxCBT Classic Edition Linux Apache MySQL PHP (LAMP) - Module 8
* Linux Web Services - Apache/Tomcat/CGI/WebLogic - Module 8 o Discuss Apache Web Server's history, ubiquity (netcraft stats) and reliability o Explain Apache Web Server's capabilities (Virtual directories, modules, WebDav, etc.) o Implementation of Apache Web Server 2.x o Evaluate installation/implementation results of Apache Web Server 2.x o Demonstrate implementation of aliases & redirects via mod_alias o Restrict access to aliases and test access from Linux & Windows 2003 nodes o Examine implications of alias & redirect access on access & error logs from multiple hosts o Demonstrate implementation of virtual directories o Demonstrate configuration of several virtual hosts o Discuss and implement Apache 2.x logging system per virtual host o Configure basic authentication to virtual hosts containers via .htaccess & Directory directives o Configure digest authentication to virtual hosts containers via Directory & .htaccess directives o Configure SSL support for the virtual hosts o Demonstrate SSL support without certificate provided by Certificate Authority o Implementation of Webalizer Log Analysis software o Customization of Webalizer to automatically generate reports for multiple virtual hosts o Implementation of AWSTATS Log Analysis software o Customization of AWSTATS to automatically generate reports for multiple virtual hosts
* Dynamic web sites - Common Gateway Interface(CGI) & scripting engine discussion & implementation o Implement CGI access to Linux via Apache & PERL scripts o Discuss benefits of PHP Dynamic Web Access Scripting Engine o Implementation of PHP Dynamic Web Access Scripting Engine o Evaluate PHP Dynamic Web Access Scripting Engine installation results o Execute sample PHP web pages on Apache Web Server 2.x
* Application Servers - Java J2EE Platform integration with Linux o Discuss benefits of Apache Tomcat Dynamic Web Scripting(JSP)/Java Servlet Engine o Implementation of Sun's Java Development Kit (JDK) 1.4.x for Apache Tomcat support o Implementation of Apache Tomcat Dynamic Web Scripting(JSP)/Java Servlet Engine o Evaluate Apache Tomcat Dynamic Web Scripting(JSP)/Java Servlet Engine installation results o Execute sample Apache Tomcat Dynamic Web Scripting(JSP)/Java Servlet applications o Discuss benefits of BEA Weblogic JSP/Servlet/Enterprise Java Beans Engine o Implementation of BEA Weblogic JSP/Servlet/Enterprise Java Beans Engine o Evaluation of BEA Weblogic JSP/Servlet/Enterprise Java Beans Engine results o Execute sample applications on BEA Weblogic JSP/Servlet/Enterprise Java Beans Engine o Discuss benefits of Jboss J2EE JSP/Servlet/Enterprise Java Beans Engine o Implementation of Jboss JSP/Servlet/Enterprise Java Beans Engine o Evaluation of Jboss JSP/Servlet/Enterprise Java Beans Engine results o Execute sample applications on Jboss JSP/Servlet/Enterprise Java Beans Engine
* Linux Messaging Essentials & applications - Module 9 * Discussion of messaging concepts and applications * Sendmail MTA Essentials o Introduction to Sendmail Message Transfer Agent (MTA) o Implementation of Sendmail o Configure Sendmail to relay messages for remote hosts o Configure Sendmail to support virtual hosts/multiple domains o Evaluate results of routing messages to multiple domains using Sendmail o Sendmail logging capabilities o Implement AWSTATS log reporting engine to generate HTML sendmail reports
* Postfix MTA Essentials o Introduction to the Postfix Message Transfer Agent (MTA) o Install Postfix o Install Mail Transfer Agent (MTA) administrative switching tools o Switch system from Sendmail to Postfix as default MTA o Explore Postfix configuration files and directory structure o Implement outbound messages via Postfix o Confirm receipt of outbound messages on publicly-accessible systems o Configure Postfix to support virtual domains o Build Postfix virtual user mappings for virtual domains support o Test virtual domains via external messaging sources
* Post Office Protocol Version 3 Essentials o Discuss the capabilities and limitations of POP3 o Implement POP3 services o Implement secure POP3 services o Demonstrate access to POP3 services from the client perspective o Implement Secure POP3 services using SSL with self-signed certificate
* Internet Messaging Access Protocol (IMAP) o Discuss the capabilities and limitations of IMAP o Implement IMAP services o Demonstrate access to IMAP services from the client perspective o Implement Secure IMAP services using SSL with self-signed certificate
* Web-based Mail Implementation using Squirrel-mail o Describe required squirrel mail components for web-mail integration o Install squirrel mail on Internet production system o Configure squirrel mail defaults for linuxcbt.net domain o Verify Sendmail virtual hosting configuration for linuxcbt.net domain o Verify IMAP configuration o Configure Apache alias for squirrel mail integration o Configure Apache Virtual Host for squirrel mail integration o Configure BIND DNS services for squirrel mail integration o Explore squirrel mail's web-based interface o Generate mail from various remote domains (hotmail.com, etc.) and retrieve with squirrel mail
Linux Concepts/Offensive/Defensive Security Implementation Techniques - Module 10
* Secure Shell (SSH) Concepts & Implementation o SSH client concepts - replacement for clear-text-based Telnet, RCP, FTP protocols. o Identification of required OpenSSH/OpenSSL components o Demonstrate SSH connectivity & public key registration o Implement globally-shared public keys o Generate RSA & DSA public key/private key pairs o Configure SSH client and SSHD to authenticate via public/private key pairs o Authenticate to remote hosts using public/private key pairs o Use Secure Copy (SCP) to move files o Port Forwarding implementation o Port Forwarding integration with Linux & Windows 2003 Server o X11 Forwarding demonstration o Use Secure File Transfer Protocol (SFTP) to move files
* Linux Defensive Security Implementation Techniques o Implement NMAP port scanner and demostrate usage to ascertain open doors o Discuss & demonstrate operating system fingerprinting techniques with NMAP o Demonstrate IP-spoofing & packet forging with NMAP o Discuss the benefits of the NESSUS Security & vulnerability scanner o Implement Nessus client/server Security vulnerability scanner o Demonstrate parallel security scanning of local & remote subnets o Explore Nessus's reporting capabilities (NBE/XML/HTML/etc.) o Demonstrate Nessus class-based access for corporate usage o Implement Ethereal network sniffer o Demonstrate telnet clear-text password theft with Ethereal o Demonstrate alternative SSH encrypted sessions with Ethereal o Demonstrate FTP clear-text password theft with Ethereal o Demonstrate alternative SFTP encrypted sessions with Ethereal o Implement HPING highly customizable packet forging tool o Compare & contrast PING with HPING o Demonstrate IP packet spoofing with HPING & Cisco PIX firewall integration o Demonstrate HPING's ability to communicate with ICMP-filtered Internet servers o Demonstrate using HPING to setup a trojan horse backdoor for executing arbritary code o Implement John the Ripper password cracking tool o Discuss file and directory security o Implement chmod,chown,umask,SUID,SGID,etc.
* Linux Defensive Security Implementation Techniques o Implement Multi-Router Traffic Grapher (MRTG) to establish network performance baseline o Configure Cisco PIX firewall for MRTG support via Simple Network Management Protocol (SNMP) o Configure MRTG to generate perfomance & badwidth-related graphs for Cisco PIX firewall o Implement IP Tables Host-based firewall support o Configure IP Tables to restrict access to necessary services o Introduce, discuss & plan the implementation of Snort 2.x Intrustion Detection System (IDS) o Discuss Snort intrustion detection concepts related to hubs & switches o Install Snort 2.0 Network-based Intrusion Detection System o Implement Snort 2.0 network sniffing functionality o Implement Snort 2.0 sniffing & packet-logging functionality o Demonstrate Snort's ability to monitor traffic between designated hosts o Demonstrate password theft using Snort & FTP connections o Demonstrate password theft using Snort & Apache HTTP basic authentication connections o Implement Snort 2.0 Network-based Intrusion Detection System o Implement SnortSnarf for web-based reporting of Snort 2.0 logs o Examine SnortSnarf reports via SSL-enabled web session o Demonstrate how to implement port mirroring on Cisco Catalyst switches o Implement Network Address Translation (NAT) o Discuss & Implement Port Address Translation (PAT) o Implement TCP Wrappers o Configure Xinetd to suppress access to the system from port-scanners o Discuss & Disable Portmap services
More Info : http://www.linuxcbt.com/products_linuxcbt.php