1,760
edits
Changes
→VM network configuration, server requirements
** The Primary DNS (running on VM pri-dns, IP:192.168.x.53) is authoritative for your domain.
** The Caching-only name server (running on co-nfs, IP: 192.168.x.153) which allows DNS queries only from hosts in your network. The firewall on your host should allow only this caching name server to send DNS queries to root name servers in the lab.
** The Root Name server (running on VM rns-nis, IP: 192.168.x.253), which is authoritative for the root zone. You should create the root zone file from the information [[Domainreg|here]]. You could download the shell script [[Get-root-zone|here ]] and run it on your system to generate the necessary resource records for the root zone. You need to add additional appropriate resource records to complete it. You will get 10% bonus mark if you run a root name server on a Raspberry Pi.
===NFS Server - on VM co-nfs, (IP: 192.168.x.153)===
* Create a directory called "/nethome" and use it for centrally hosting new all network user's home directory.* Use the appropriate export option (s) (especially root_squash and no_root_squash) when exporting network users' home directory* Superuser on the other VMs should not have root privilage privillage on the exported directory unless the remote machine is running the NIS server.
* Network users should not have read or write access to other network users' home directory.
===NIS Server - on VM rns-nis, (IP: 192.168.x.253)===
* NIS Domanin Domain Name - [learn-id].nis, where [learn-id] is your matrix login account name.
* Minimum user and group IDs - 5000
* Network user's home directory : /neth/newuser for user called "newuser"
* Please test your network connectivity with at least one of your classmates to make sure you can connect your VMs to their VMs.
* Do not allow DNS queries from any machines in your network to any root name servers in the lab except your caching-only DNS server.
* SELinux must be turned on and run in enforcing mode on all of your VMs. You need to configure the runtime SELinux boolen boolean accordingly.
* You must turn on firewall on all machines and have the filter table rule drops or rejects any unwanted packets.
