2. Make sure that you have the client and server components for NFS, NIS, and DNS on the three new VMs. Install any missing software if they are not already installed as specified in the following paragraphs. The three VMs must provide support for local and network (using NIS) user accounts. After a successful login, a network user should get the same execution environment all the time and be able to access all the files he/she had previously created on your network.
3== VM network configuration, server requirements =====DNS Servers===*You need three DNS servers for this assignment: Primary, Caching-only, and Root Name server:** The Primary DNS (running on VM pri-dns, IP:192. Network Configuration168.x.53) is authoritative for your domain.** The Caching-only name server (running on co-nfs, IP: 192.168.x.153) which allows DNS queries only from hosts in your network. The firewall on your host should allow only this caching name server setupto send DNS queries to root name servers in the lab.** The Root Name server (running on VM rns-nis, IP: 192.168.x.253), which is authoritative for the root zone. You should create the root zone file from the information here. You could download the shell script here and configuration requirement:run it on your system to generate the necessary resource records for the root zone. You need to add additional appropriate resource records to complete it. You will get 10% bonus mark if you run a root name server on a Raspberry Pi.
DNS Servers==NFS Server - on VM co-nfs, (IP:192.168.x.153)==* Create a directory called "/nethome" and use it for centrally hosting new network user's home directory.* Use the appropriate export option (especially root_squash and no_root_squash) when exporting network users' home directory* Superuser on the other VMs should not have root privilage on the exported directory unless the remote machine is running the NIS server.* Network users should not have read or write access to other network users' home directory.
You need three DNS servers for this assignment: Primary, Caching==NIS Server -only, and Root Name server: The Primary DNS (running on VM prirns-dnsnis, (IP:192.168.x.53253) is authoritative for your domain.== The Caching* NIS Domanin Name -only name server (running on co[learn-nfsid].nis, IP: 192.168.x.153) which allows DNS queries only from hosts in where [learn-id] is your network. The firewall on your host should allow only this caching name server to send DNS queries to root matrix login account name servers in the lab. The Root Name server (running on VM rns* Minimum user and group IDs -nis, IP5000* Network user's home directory : 192.168.x.253), which is authoritative /neth/newuser for user called "newuser"* Please use NFS version 3 when mounting the root zone. You should create the root zone file from the information here. You could download the shell script here and run it on your system to generate the necessary resource records for the root zone. You need to add additional appropriate resource records to complete it. You will get 10% bonus mark if you run a root name server on a Raspberry Pi.nfs share folders
NFS Server - on VM co-nfs==Network, firewall, (IP: 192.168.x.153):and SELinux== Create a directory called "/nethome" * Your host and use it for centrally hosting new network user's home directory Use the appropriate export option all your VMs must be accessible from other machines (especially root_squash hosts and no_root_squashVMs) when exporting in the lab.* Please test your network users' home directoryconnectivity with at least one of your classmates to make sure you can connect your VMs to their VMs. Superuser on the other VMs should * Do not have allow DNS queries from any machines in your network to any root privilage name servers in the lab except your caching-only DNS server.* SELinux must be turned on and run in enforcing mode on all of your VMs. You need to configure the exported directory unless the remote machine is running the NIS serverruntime SELinux boolen accordingly. Network users should not * You must turn on firewall on all machines and have read the filter table rule drops or write access to other network users' home directoryrejects any unwanted packets.
NIS Server - on VM rns-nis, (IP: 192.168.x.253): NIS Domanin Name - [learn-id].nis, where [learn-id] is your matrix login account name. Minimum user = Test and group IDs - 5000 Network user's home directory : /neth/newuser for user called "newuser" Please use NFS version 3 when mounting the nfs share foldersevaluation =
NetworkOnce all your three VMs for this assignment described above are up and running, firewallyou will be asked to perform any of the following activities:* Add a new host entry to your DNS server, to provide both forward and SELinuxreverse lookup queries. Your host and all * Add a new user to your VMs must be accessible NIS Domain* Remove a user from other machines (hosts and your NIS Domain* Login to any one of the three VMs) in using the labnewly created network user account. Please test your network connectivity with at least * Login to any one of your classmates to make sure you can connect your three VMs to their VMs. Do not allow DNS queries from any machines in your network to any root name servers in the lab except your caching-only DNS serverusing the newly created network user account. SELinux must be turned on * Troubleshoot NFS, NIS, DNS, RPC, and run in enforcing mode on all of your VMsportmapper problems. You need to configure the runtime SELinux boolen accordinglyFor examples: server service not running, configuration file not setup properly or being corrupted, broken network connection, etc. * You must turn on firewall on all machines and have the filter table rule drops or rejects any unwanted packets.may be asked to perform a reboot test
4. Once all = Grading ===System configuration settings 40% of the assignment ==On the three VMs described above are up and runningdue date, you will be asked given a set of scripts, which should be run on each VM to collect server configuration information. The scripts will produce an evaluation report for you to perform any of the upload to blackboard. The following activitiesinformation may be collected:* Network Settings* Services configuration* Firewall settings* Local user accounts* RPC Client services* Portmapper registry* etc...
Add a new host entry to your DNS server, to provide both forward and reverse lookup queries. Add a new user to your NIS Domain Remove a user from your NIS Domain Login to any one of the three VMs using the newly created network user account. Login to any one of your three VMs from any machines in the lab using the newly created network user account. Troubleshoot NFS, NIS, DNS, RPC, and portmapper problems. For examples: server service not running, configuration file not setup properly or being corrupted, broken network connection, etc. You may be asked to perform a reboot test 5. Grading System configuration settings: On the due date, you will be given a set of scripts, which should be run on each VM to collect server configuration information. The scripts will produce an evaluation report for you to upload to blackboard. The folling information may be collected: Network Settings Services configuration Firewall settings Local user accounts RPC Client services Portmapper registry etc... This part worth 40==Demonstration 60% of the assignment.== Demonstration On the due date, your will be given 30 minutes to setup you get your VMs up system to perform the activities mentioned in paragraph 4 above and perform a reboot test.
This part worth 60% of the assignment.
6. If you have any questions about this assignment, please talk to your professor before the due date.