Changes

*Edit the file /etc/idmapd.conf and uncomment and change the following lines: Verbosity = 3 Domain = <learn-id>.org*Restart the nfs-idmap daemon. systemctl restart nfs-idmap.service*Start your nfs server with the command: systemctl start nfs-server.service*Run and record the output of the following commands: exportfsNFS RESOURCES==

NOTE*[https: You'll have to adjust your firewall on the host to get //prezi.com/sfxdbjbxgu1e/file-servers-nsf-samba/ File Server Notes] (Week 9 class notes)*[http://nfs.sourceforge.net/nfs-howto/ Linux NFS to workHOWTO]*[http://tldp. Run netstat to determine the ports neededorg/HOWTO/NFS-HOWTO/security.html NSF Security] (List of tips regarding NSF and security)

==OVERVIEW=Part B: Setting up the Guest VM===*Ensure the VM guest network is functioning properly. You can use the "host cbc.ca" command to see if DNS queries are being answered. *Ensure you have full connectivity to the internet.*Be sure to set the firewall on both your VM and host according to prior labs. Use the command iptables-save to verify.*Install the NFS software on both vm03 and your host using the command yum install nfs-utils*Add the following line to the bottom of the /etc/fstab file on vm03 192.168.x.1:/home /home nfs4 defaults 0 0{{Admon/important|Warning:|Do not change any other lines in this file. Do not change any lines in /etc/fstab on your host machine. Doing so can make your machine fail to boot.}}*Logout of vm03 and shut it down.

====Testing NFS mounts In '''OPS235''', you learned how to install and configure an SSH server to be able to use utilities such as '''ssh''', '''scp''' and '''sftp'''. Although the '''sftp''' utility is useful for transferring files between different computers via the Internet, it is not considered useful or efficient for accessing files on your VM====*Restart vm03 and login using your learnidservers that are connected over a local network.

*Check Two popular protocols called '''Network File Server''' ('''NFS''') and '''Samba''' ('''SMB''') are used to provide high speed file access between servers on a local network. The '''NFS''' protocol allows a user to access files on another server in a local network in a similar way that the home directory local files on a same server are accessed. The '''Samba''' open-source software is mounted mount | grep /home**If it is notused to access files from Windows servers using a combination of Windows protocols including NetBIOS, try running 'mount /home' as root.*On vm03SMB, create an empty file using the touch command. touch empty_file_created_on_vm03*Now shutdown vm03etc.*Now on your host PC, run and will be discussed in the following command: ls -l*You should see the file you just created on vm03next lab.

This lab will focus on installing, configuring and using '''NFS''' to access files between different Linux servers on your local network.  ==INVESTIGATION 1: USING AUTOMOUNT WITH NFS== In this investigation, we will set up an '''NFS server''' on our '''VM2''' machine. We will then set up an '''NFS client on our <u>VM3</u> machine''' so that we can '''view and import files of '''VM2's /home directory''' from our <u>'''VM3'''</u> machine. {{Admon/important|Prerequistites|Due to the changes made in lab3, '''you will now need your vm1 running (as the DNS server)''' in order for any of your virtual machines to be able to use the internet.}} ===Part C: Setting up Automount the NFS Server (VM2)=== '''Perform the following tasks:''' #Make certain that all of your VMs are running.#Switch to your '''VM2''' machine.#Although the NFS application was already installed on your VM, we will install additional utilities for NFS by issuing the following command:<br>'''yum install nfs-utils'''#The '''/etc/exports''' file allows you to restrict the access to servers to access files for security purposes. Edit the '''/etc/exports''' file, and add the following line to the file:<br>'''/home 192.168.x.4(rw,root_squash,insecure)'''#What does the IPADDR 192.168.x.4 represent? Record your answer in your lab logbook.#Issue the following command (in order of appearance) in order to start your NFS server:<br>'''systemctl start rpcbind'''<br>'''systemctl start nfs'''#Use the '''systemctl''' command to enable both the rpcbind and nfs services upon VMstartup.#Issue the following command in order to add (or "build") the server's list of permitted exports: <br>'''exportfs -r'''#Run and record the output of the following commands in your lab logbook:<br>'''exportfs'''<br>'''showmount -e'''#You will have to adjust your firewall settings on your VM2 machine to allow NFS to work (Tip: run the '''netstat''' command in order to determine the <u>'''ports'''</u> needed and issue the appropriate ''iptables'' command or commands). Make certain to save your current iptables rules so they remain unchanged whey you reboot your NFS server and your client VM. ===Setting up &amp; Testing the NFS Client (VM3)===On vm03 '''Perform the following tasks:''' #make certain that your '''VM3''' machine can connect to the network and that your '''VM1''' machine is running as the DNS server (Tip: you can use the "host cbc.ca" command to see if DNS queries are being answered.#Make certain that you are logged into your '''VM3''' machine.#Install the '''nfs-utils''' package on your '''VM3''' machine.#Add the following line to the bottom of the '''/etc/fstab''' file on your VM3 machine:<br>'''192.168.x.3:/home /home nfs4 defaults 0 0'''{{Admon/important|Warning: Do not change any other lines in this file. |Do not change any lines in '''/etc/fstab''' file contained for your VM3 machine. Doing so can cause your VM3 machine not to boot properly.}}<ol><li value="5">Run the following command to confirm that SELinux will not block the network share:<br>'''setsebool -P use_nfs_home_dirs 1'''</li><li>Issue the following command to mount any network shares without having to logout and login to your VM3:<br>'''mount -a'''<li>Create an empty file within the regular user's home directory on your VM3 machine.<li>Issue the ls-l command for VM2 regular user's <u>'''home'''</u> directory. Do you see a file that you created there?</li><li> Switch to your '''VM2''' machine and view the contents on your regular user's <u>'''home'''</u> directory. What you do you notice? What does this mean in terms of using NFS? Record your observations in your lab logbook.</li><li>'''Restart your VM3 machine''' and login with your regular user id.</li><li>Make certain that you iptables rules are the same to allow NFS to work</li><li>Check that the VM3 regular user's <u>'''home'''</u> directory is mounted by issuing the following command:<br>'''mount | grep /home'''</li><li>If it is not, try running '''mount /home''' as root perform and observe any errors.</li><li>Create another file in the regular user's home directory on your '''VM3''' machine.</li><li>Switch to your '''VM2''' machine to see if you can view that file.</li><li>Finally, issue the '''ls-l''' command in your VM3 regular user's home directory to note the contents.</li></ol> '''Record steps, commands, and your observations in INVESTIGATION 1 in your OPS335 lab log-book'''  ==INVESTIGATION 2: SETTING UP AUTO-MOUNT ON CLIENT (VM3)== In this investigation, we will be setting up to allow a network file share permanently on your VMs. '''Perform the following tasks:''' #Switch to your '''VM3''' machine.*#Unmount the /home directory from VM2 by running '''umount /home'''#Comment or remove the line from that you added in the '''/etc/fstab that you entered earlier''' file in the previous investigation.#Restart your '''VM3''' machine.*#Install automount the '''autofs''' package by issuing the following command:<br>'''yum install autofs'''*Move #Rename the existing file '''/etc/auto.master''' file by issuing the following command: <br>'''mv /etc/auto.master /etc/auto.master.orig*This is a great way to keep '''<br>Keep this file as a back -up in case you need to restore the file in the future. Now create another: #Use the vi text editor to create a new (empty) '''/etc/auto.master*Add only ''' file and add the following line: <br>'''/home /etc/auto.home --timeout=60'''#Save your editing changes.*Create #Use the vi text editor to create a file called '''/etc/auto.home ''' and add ONLY add the following line: <br>'''* &nbsp; -fstype=nfs4,rw,nosuid,soft &nbsp; 192.168.x.13:/home/&'''*Start autofs with #Save your editing changes.#Use the '''systemctl''' command systemctl to start the '''autofs.''' service*And , and another systemctl command in order to ensure that the autofs service will automatically start at boot: systemctl enable autofs.service*#Log out of vm03and back into '''vm3''' using your <u>regular</u> user account (i.e.*Restart the nfs server on your hostnot root.*Log into vm03 using You should be in your learn regular user accountfor both VM2 and VM3 machines).*#Open a terminal and enter the following command: <br>'''mount | grep home'''*#How does it differ from the previous mount?Record your findings in your lab logbook.*Create #On your '''VM3''' machine, create another empty file with the name :<br>'''touch another_empty_file_from_vm03yet_another_empty_file_from_vm3'''*#Run and record the output of the following command (on both your VM2 and VM3 machines):<br>'''df -hT'''*Back on #Switch to the host nfs server ('''vm2'''), run and record the output of: '''ls -l*''' in your home directory (You should see the files you created on vm03vm3).*You may encounter errors with SELinux during the lab. It is required #Now that you leave it runninghave VM3 automatically mounting home directories from your VM2 machine, repeat the steps in this investigation in order to configure your '''VM1''' machine to do the same. Use the following   '''Record steps, commands , and your observations in INVESTIGATION 2 in your OPS335 lab log-book''' ==COMPLETING THE LAB== '''Arrange evidence (command output) for each of these items on your screen, then ask your instructor to determine what booleans need to be flippedreview them and sign off on the lab's completion:''' ::<span style="color:green;font-size:1.5em;">&#x2713;</span> Show mount information regarding vm3 and vm1 shares with NFS server (vm2) audit2allow ::<span style="color:green;font-size:1.5em;">&#x2713;< /varspan> All files shown in network server (vm2)::<span style="color:green;font-size:1.5em;">&#x2713;</logspan> Display contents of '''/auditetc/audit.log audit2why < exports''', '''/varetc/logauto.master''' and '''/auditetc/auditauto.loghome''' files::<span style="color:green;font-size:1.5em;">&#x2713;</span> Lab logbook completed ==EXPLORATION QUESTIONS==

#What is the role of the /etc/mtab file on the hostnfs server?#What port did you have to open?#What does the idmapd daemon providenfs-server use?