1,576
edits
Changes
→Configuring MySQL
== Introduction and Purpose ==
In this assignment, you will demonstrate the skills you have learned to this point by configuring two services: a '''database server''' and a '''web server'''. You will install and use a database-backed web application, '''Wordpress''', to show that these services have been installed properly. You will also configure the '''SELinux''' security system as well as the '''iptables firewall''' to further enhance the security of your computer system.
'''NOTE: Do this assignment inside the centos3 virtual machine. '''
# Start the httpd service using '''systemctl'''.
# Ensure that the httpd service starts automatically during boot.
# Confirm that you can connect to your web server using a web browser -- both from centos3 (you can test using '''linkslynx''') as well as from the host. You should see the Apache Test Page.
# If you can't connect to it from outside the machine - perhaps your firewall is blocking access to the web server.
#* If you do not see any messages, research how you can secure the MySQL installation and set the MySQL-root password.
#* Read those messages carefully, you are setting up a production MySQL server and there shouldn't be any "test" databases or anonymous users or users without a password.
# Set your MySQL root password to your learn ID Seneca e-mail username (without the @senecac.onsenecacollege.ca part).
# This following part is challenging so take your time and read the instructions to make sure you do it properly, we have to set up a dedicated user and database for wordpress:
## '''NOTE: If you decide to download the wordpress package during this section, please use the 5.0.x version here (use wget): https://wordpress.org/wordpress-5.0.7.tar.gz'''
## Start by looking at http://codex.wordpress.org/Installing_WordPress#Using_the_MySQL_Client where you will find instructions for the setup.
## You will need to run those commands in a centos3 terminal.
## Your adminusername is root
## Your databasename is myblog
## Your wordpressusername is your learn IDSeneca username## The password should also be your learn IDSeneca username
## Your hostname is localhost
Wordpress (like most web applications) is not available in the Fedora repositories, it must be downloaded and installed manually.
# '''Download the latest 5.tar0.gz x version from wodpress.org into of wordpress to your centos3 VM here (use wget): https://wordpress.org/wordpress-5.0.7.tar.gz'''
# Extract it into '''/var/www/html'''
# Now we need to allow Apache to modify the wordpress installation. To do this use <b>chown</b> and <b>chgrp</b> with <b>-R</b> option to make the owner and group of every file and directory inside wordpress "apache".
#* Change the DB_NAME, DB_USER, DB_PASSWORD to the appropriate values.
# Now go back to http://centos3/wordpress/ - you should see a Wordpress Welcome/Setup page.
#* Set the title to Your Name's Blog. For example for us me it would be "OPS235 Professor's Blog"
#* Set the password to your learn ID.
#* Set the email to your Seneca email address.
''' Make your posts look professional. That means use good english, headings, bullet or numbered lists, etc.
== Configuring iptables ==
Now that you've set up your blog, you must secure your firewall. The purpose of this section is to lock down your rules as much as possible.
# You must be using iptables (firewalld should be uninstalled).
# Your INPUT chain's default policy must be set to DROP.
# Create INPUT chain exceptions (rules) to allow connections to your blog.
# Other than the specific ports needed to access your blog, the only other allowed exception is for SSH.
== Submitting Your Assignment ==
'''Due date:''' Your name will be called in Check with your professor for the lab due dates on the due date for the this assignment. If you are not there when your name is called - you will lose 20% of your and how they choose to mark. In that case you may show me your submission in the second lab that week insteadit. Assignments submitted after that the due date will receive a grade of 0, but must still be completed satisfactorily in order to pass the course.
=== Ready to show ===
Open one or more terminals in c7host, SSH to centos3 from those terminals, and have the following ready:
* The correct RPMs are installed
* Status of the '''mysql ''' service* Status of the '''httpd ''' service* MySQL output of: '''show databases; use mysql; select User,Password from user; use myblog; show tables;'''* Output of : '''ls -la /var/www/html/wordpress/'''* Output of : '''head -30 /var/www/html/wordpress/wp-config.php'''* Output of: '''iptables -L -vn --line-numbers'''* Open a Firefox window with to: http://centos3/wordpress/
=== Rubric ===
|-
| Wordpress showing in Firefox || 1 ||
|-
| iptables rules configured correctly || 2 ||
|-
| Everything ready to show || 2 ||
| Second blog post || 3 ||
|-
| '''Total''' || 18 20 ||
|}
[[Category:OPS235]]
