1,576
edits
Changes
m
{{Admon/important|It is YOUR responsibility to Backup your centos3 VM for this Assignment!|You are required to frequently backup your VM prior to exiting a work session during In this assignment. Your instructor , you will NOT accept demonstrate the fact that your hard disk crashed skills you have learned to this point by configuring two services: a '''database server''' and lost all of your worka '''web server'''. If you properly backed up your VM images You will install and xml configuration files to use a USBdatabase-backed web application, then you can purchase a new hard-disk or wipe and recreate '''Wordpress''', to show that these services have been installed properly. You will also configure your hard disk and restore '''firewall''' to further enhance the security of your VMscomputer system.}}<br>
== Introduction and Purpose == In '''NOTE: Do this assignment, you will demonstrate inside the skills you have learned to this point by configuring two services: a '''database server''' and a '''web server'''. You will install and use a database-backed web application, '''Wordpress''', to show that these services have been installed properlycentos3 virtual machine. You will also configure the '''SELinux''' security system as well as the '''iptables firewall''' to further enhance the security of your computer system.
'''NOTE: Do {{Admon/important|It is YOUR responsibility to backup your centos3 VM for this assignment!|You are required to frequently backup your VM prior to exiting a work session during this assignment inside . Your instructor will NOT accept the centos3 virtual machinefact that your hard disk crashed and lost all of your work. If you properly backed up your VM images and xml configuration files to a USB, then you can purchase a new hard-disk or wipe and recreate your hard disk and restore your VMs. '''}}
== Installing Packages==
== Configuring Apache ==
== Configuring MySQL ==
== Installing and Configuring Wordpress ==
== Write-up ==
== Configuring iptables ==
== Submitting Your Assignment =='''Due date:''' Check with your professor for the due dates on this assignment and how they choose to mark it. Assignments submitted after the due date will receive a grade of 0, but must still be completed satisfactorily in order to pass the course.
'''Due date:''' Your name will be called in the lab on the due date for the assignment. If you are not there when your name is called - you will lose 20% of your mark. In that case you may show me your submission in the second lab that week instead. Assignments submitted after that will receive a grade of 0, but must still be completed satisfactorily in order to pass the course.== Online Submission Requirements ==
=== Ready to show ===All screenshots must be full c7host desktop captures, and contain no errors. The fewer total images, the better. Submit through Blackboard, unless told otherwise by your professor.
=== Rubric ===
→Rubric
= OPS235 Assignment 2 Introduction and Purpose =
'''Weight:''' 5% of the overall grade
'''Due Date:''' Week 13 <br />Refer to your instructor for submission instructions12
'''Submission:''' You will be submitting your completed work through a series of screenshots on Blackboard. (See below.)
<u>Install these packages using ''yum''</u>
:*Download a "zipped tar-ball" from a website (google-search), decompress, and compile
# Start the httpd service using '''systemctl'''.
# Ensure that the httpd service starts automatically during boot.
# Confirm that you can connect to your web server using a web browser -- both from centos3 (you can test using '''linkslynx''') as well as from the host. You should see the Apache Test Page.
# If you can't connect to it from outside the machine - perhaps your firewall is blocking access to the web server.
# Start the MySQL service (mysqld or mariadb) using '''systemctl'''.
#* If you do not see any messages, research how you can secure the MySQL installation and set the MySQL-root password.
#* Read those messages carefully, you are setting up a production MySQL server and there shouldn't be any "test" databases or anonymous users or users without a password.
# Set your MySQL root password to your learn ID Seneca e-mail username (without the ''@senecac.onmyseneca.ca '' part).
# This following part is challenging so take your time and read the instructions to make sure you do it properly, we have to set up a dedicated user and database for wordpress:
## '''NOTE: If you decide to download the wordpress package during this section, please use the 5.0.x version here (use wget): https://wordpress.org/wordpress-5.0.7.tar.gz'''
## Start by looking at httphttps://codex.wordpress.org/Installing_WordPresssupport/article/creating-database-for-wordpress/#Using_the_MySQL_Client using-the-mysql-client where you will find instructions for the setup.
## You will need to run those commands in a centos3 terminal.
## Your adminusername is root
## Your databasename is myblog
## Your wordpressusername is your learn IDSeneca username## The password should also be your learn IDSeneca username
## Your hostname is localhost
Wordpress (like most web applications) is not available in the Fedora repositories, it must be downloaded and installed manually.
# Check your work so far by pointing your web browser to http://centos3/wordpress/ where you will get an error starting with "There doesn't seem to be a wp-config.php file"
# Copy the wp-config-sample.php file to wp-config.php and edit the new file:
#* Change the DB_NAME, DB_USER, DB_PASSWORD to the appropriate values.'''(Do not use the root account for your database connection! Marks will be deducted.)'''
# Now go back to http://centos3/wordpress/ - you should see a Wordpress Welcome/Setup page.
#* Set the title to Your Name's Blog. For example for me it would be "OPS235 Professor's Blog"
#* Click "Install Wordpress", you should see a "Success!" message.
Write a blog post on your new blog explaining:
''' Make your posts look professional. That means use good english, headings, bullet or numbered lists, etc.
Now that you've set up your blog, you must secure your firewall. The purpose of this section is to lock down your rules as much as possible.
# You must be using iptables (firewalld should be uninstalled).
# Create INPUT chain exceptions (rules) to allow connections to your blog.
# Other than the specific ports needed to access your blog, the only other allowed exception is for SSH.
# '''Tip''': Your OUTPUT chain should allow ''all'' traffic. (You can leave it at its default)
= Submitting Your Assignment =
Open one or more terminals in c7host, SSH to centos3 from those terminals, and have screenshot the following ready:* The correct List of additional RPMs are installedfor the assignment* Status of the '''mysql''' service* Status of the '''httpd''' service* MySQL output ofthe chained command: '''<code>show databases; use mysql; select User,Password from user; use myblog; show tables;</code>'''* Output ofcommand: '''<code>ls -la /var/www/html/wordpress/</code>'''* Output ofcommand: '''<code>head -30 /var/www/html/wordpress/wp-config.php</code>'''* Output ofcommand: '''<code>iptables -L -vn --line-numbers</code>'''* Open a Firefox window to: '''http://centos3/wordpress/'''
{| class="wikitable" border="1"
| iptables rules configured correctly || 2 ||
|-
| Everything ready to show Blog accessed using local hostname resolution || 2 ||
|-
| First blog post || 3 ||
| Second blog post || 3 ||
|-
| '''Total''' || '''20 ''' ||
|}
[[Category:OPS235]]
[[Category:Summer 2020]]
[[Category:Digital Classroom]]
