According the following requirements, configure autofs service and automatically mount to user's home directory in the ldap domain.
- Instructor.example.com (192.168.0.254) has shared /home/guests/ldapuserX home directory to your system by over NFS export, X is your hostname number.
- LdapuserX's home directory is exist in the instructor.example.com: /home/ guests/ldapuserX
- LdapuserX's home directory must be able to automatically mount to /home/ guests/ldapuserX in your system.
- Home directory have write permissions for the corresponding user.
However, you can log on to the ldapuser1 - ldapuser99 users after verification. But you can only get your corresponding ldapuser users. If your system's hostname is server1.example.com, you can only get ldapuser1's home directory.
正解:
mkdir -p /home/guests
cat /etc/auto.master:
/home/guests /etc/auto.ldap
cat /etc/auto.ldap:
ldapuser1 -rw instructor.example.com:/home/guests/ldapuser1
automatically mount all the user's home directory #* -rw instructor.example.com:/home/guests/&
質問 2:
Please open the ip_forward, and take effect permanently.
正解:
vim /etc/sysctl.conf net.ipv4.ip_forward = 1
sysctl -w (takes effect immediately)
If no "sysctl.conf" option, use these commands:
sysctl -a |grep net.ipv4
sysctl -P net.ipv4.ip_forward = 1
sysctl -w
質問 3:
Binding to an external validation server.
System server.domain11.example.com provides a LDAP validation service, your system should bind to this service as required:
Base DN of validation service is dc=example,dc=com
LDAP is used for providing account information and validation information Connecting and using the certification of http://server.domain11.example.com/pub/EXAMPLE-CA-CERT to encrypt After the correct configuration, ldapuser1 can log into your system, it does not have HOME directory until you finish autofs questions, ldapuser1 password is password.
正解:
yum -y install sssd authconfig-gtk krb5-workstation authconfig-gtk // open the graphical interface Modify user account database to ldap, fill up DN and LDAP SERVER as questions required, use TLS to encrypt connections making tick, write http://server.domain11.example.com/pub/EXAMPLE-CA-CERT to download ca, authentication method choose ldap password.
You can test if the ldapuser is added by the following command:
Id ldapuser1
Note: user password doesn't not need to set
質問 4:
Successfully resolve to server1.example.com where your DNS server is 172.24.254.254.
正解:
vi /etc/resolv.conf
nameserver 172.24.254.254
host server1.example.com
On every clients, DNS server is specified in /etc/resolv.conf. When you request by name it tries to resolv from DNS server.
質問 5:
Create Archive
Create a tar archive named /root/backup.tar.bz2, which should contain the contents of /usr/local. The tar archive must be compressed using bzip2.
正解:
[root@node1 ~]# yum -y install bzip2
[root@node1 ~]# tar -jcvPf /root/backup.tar.bz2 /usr/local
# Verification
[root@node1 ~]# file /root/backup.tar.bz
Kinoshita -
EX200問題集は絶対唯一無二な参考資料です。内容は全面的で、覚えやすいです。みんなのEX200試験に合格することを保障できます。