Book Image

CentOS 7 Server Deployment Cookbook

By : Timothy Boronczyk, IRAKLI NADAREISHVILI
Book Image

CentOS 7 Server Deployment Cookbook

By: Timothy Boronczyk, IRAKLI NADAREISHVILI

Overview of this book

CentOS is derived from Red Hat Enterprise Linux (RHEL) sources and is widely used as a Linux server. This book will help you to better configure and manage Linux servers in varying scenarios and business requirements. Starting with installing CentOS, this book will walk you through the networking aspects of CentOS. You will then learn how to manage users and their permissions, software installs, disks, filesystems, and so on. You’ll then see how to secure connection to remotely access a desktop and work with databases. Toward the end, you will find out how to manage DNS, e-mails, web servers, and more. You will also learn to detect threats by monitoring network intrusion. Finally, the book will cover virtualization techniques that will help you make the most of CentOS.

Related Content you might be interested in

Current Title:

Small book image
CentOS 7 Server Deployment Cookbook
Timothy Boronczyk | IRAKLI NADAREISHVILI
Oct, 2016 | 406 pages
No titles found
Table of Contents (18 chapters)
CentOS 7 Server Deployment Cookbook
CentOS 7 Server Deployment Cookbook
Credits
Credits
About the Author
About the Author
About the Reviewer
About the Reviewer
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Getting Started with CentOS
Getting Started with CentOS
Introduction
Installing CentOS using Anaconda in graphics mode
Installing CentOS using Anaconda in text mode
Coordinating multiple installations using Kickstart
Running a cloud image with Amazon Web Services' EC2
Installing a container image from the Docker Registry
Installing the GNOME desktop
Installing the KDE Plasma desktop
2
Networking
Networking
Introduction
Setting a static IP address
Binding multiple addresses to a single Ethernet device
Bonding two Ethernet devices
Configuring the network firewall with FirewallD
Configuring the network firewall using iptables
Installing a DHCP server
Configuring an NFS server to share a filesystem
Configuring an NFS client to use a shared filesystem
Serving Windows shares with Samba
3
User and Permission Management
User and Permission Management
Introduction
Escalating privileges with sudo
Enforcing password restrictions
Setting default permissions for new files and directories
Running binaries as a different user
Working with SELinux for greater security
4
Software Installation Management
Software Installation Management
Introduction
Registering the EPEL and Remi repositories
Prioritizing repositories using the Priorities plugin
Automating software updates with yum-cron
Verifying installed RPM packages
Compiling a program from source
5
Managing Filesystems and Storage
Managing Filesystems and Storage
Introduction
Viewing the size of files and available storage
Setting storage limits for users and groups
Creating a RAM disk
Creating a RAID
Replacing a device in a RAID
Creating a new LVM volume
Removing an existing LVM volume
Adding storage and growing an LVM volume
Working with LVM snapshots
6
Allowing Remote Access
Allowing Remote Access
Introduction
Running commands remotely through SSH
Configuring a more secure SSH login
Securely connecting to SSH without a password
Restricting SSH access by user or group
Protecting SSH with Fail2ban
Confining sessions to a chroot jail
Configuring TigerVNC
Tunneling VNC connections through SSH
7
Working with Databases
Working with Databases
Introduction
Setting up a MySQL database
Backing up and restoring a MySQL database
Configuring MySQL replication
Standing up a MySQL cluster
Setting up a MongoDB database
Backing up and restoring a MongoDB database
Configuring a MongoDB replica set
Setting up an OpenLDAP directory
Backing up and restoring an OpenLDAP database
8
Managing Domains and DNS
Managing Domains and DNS
Introduction
Setting up BIND as a resolving DNS server
Configuring BIND as an authoritative DNS server
Writing a reverse lookup zone file
Setting up a slave DNS server
Configuring rndc to control BIND
9
Managing E-mails
Managing E-mails
Introduction
Configuring Postfix to provide SMTP services
Adding SASL to Postfix with Dovecot
Configuring Postfix to use TLS
Configuring Dovecot for secure POP3 and IMAP access
Targeting spam with SpamAssassin
Routing messages with Procmail
10
Managing Web Servers
Managing Web Servers
Introduction
Installing Apache HTTP Server and PHP
Configuring name-based virtual hosting
Configuring Apache to serve pages over HTTPS
Enabling overrides and performing URL rewriting
Installing NGINX as a load balancer
11
Safeguarding Against Threats
Safeguarding Against Threats
Introduction
Sending messages to Syslog
Rotating log files with logrotate
Using Tripwire to detect modified files
Using ClamAV to fight viruses
Checking for rootkits with chkrootkit
Using Bacula for network backups
12
Virtualization
Virtualization
Introduction
Creating a new virtual machine
Cloning a virtual machine
Adding storage to a virtual machine
Connecting USB peripherals to a guest system
Configuring a guest's network interface

Backing up and restoring an OpenLDAP database

This recipe teaches you how to back up an OpenLDAP database by exporting the directory to an LDIF file, which can then be imported later to restore the database.

Getting ready

This recipe requires a CentOS system with a working network connection and administrative privileges either using the root account or sudo.

How to do it...

To back up an LDAP directory, export the directory using the slapcat utility:

slapcat -b "dc=ldap,dc=example,dc=com" -l backup.ldif

To rebuild the directory from an export, follow these steps:

  1. Stop the LDAP server:

    service stop slapd.service

  2. Import the file using slapadd:

    slapadd -f backup.ldif

  3. Ensure the data files are owned by the ldap user:

    chown -R ldap.ldap /var/lib/ldap/*

  4. Restart the LDAP server:

    service restart slapd.service

How it works...

slapcat exports the LDAP database's contents to LDIF-formatted output. The content is sent to STDOUT by default, so you should either capture it using the shell's redirect operators...

Previous Section
End of Chapter 7
Next Chapter