[全]RHCE复习要点分类总结-高效提分

1、RHCE复习要点分类总结-高效提分系统相关服务要点小结：Systemctl enable :Server端： postfix,smb,nmb,nfs-server,nfs-secure-server,httpd,target,mariadb （8个）Desktop端：nfs-secure,iscsi（2个）firewall-cmd -add-service:Server端：smtp、samba、nfs、rpc-bind、mountd、http、https、mysql（8个）Dektop端：无firewall-cmd -add-port:Server端：8908/tcp、3260/tcp（2个）

2、Dektop端：无yum安装包服务：Server端：postfix、samba、samba-client、nfs-utils、httpd、mod_ssl、mod_wsgi、targetcli.noarch、mariadb*（9个）Desktop端：samba-client、cifs-utils、nfs-utils、iscsi-initiator-utils（4个）主要知识点分类总结一、关于挂载（一）rhcsa1.autofs自动挂载vim /etc/auto.ldap* -rw,sync,v3 :/home/guests/&2.swap挂载:vim /

3、etc/fstab（写入UUID swap swap defaults 0 03.扩展磁盘分区挂载:vim /etc/fstab/dev/exam/lvm2 /exam/lvm2 xfs defaults 0 0（二）rhce1.samba多用户# vim /etc/fstab/server0/devops /mnt/multiuser cifs credentials=/root/smb,sec=ntlmssp,_netdev,multiuser 0 02.NFS挂载# vim /etc/:/public /mnt/nfsmount nfs s

4、ec=sys 0 0:/protected /mnt/nfssecure nfs sec=krb5p,v4.2 0 03.ISCSI客户端挂载# vim /etc/fstabUUID=dd977546-aa74-4bdf-bab5-ee0ba3f6b85d /mnt/data ext4 _netdev 0 0#mount -a二、容易忘记重要点1.samba# semanage fcontext -a -t samba_share_t /common(/.*)?# getsebool -a | grep samba_e 找到这个路径# setsebool

5、-P samba_export_all_rw 1 -P是永久生效，1是开机自启，此步骤需要等待# vim /etc/samba/smb.confworkgroup = STAFF2.nfs# vim /etc/sysconfig/nfsRPCNFSDARGS=-V 4.23.iscsi# iscsiadm -m discovery -t st -p 1:3260,1 .example:server0 发现成功# iscsiadm -m node -T .example:serv

6、er0 -l 显示success为登陆成功，如果不显示也成功4.mariadb# vim /etc/f 插入一行skip-networking=1# systemctl restart mariadb.service5.配置动态web# semanage port -a -t http_port_t -p tcp 89086.数据库配置 grant select on legacy.* to mary% identified by mary_password; grant select,insert,update,delete on legacy.* to legacy% ident

7、ified by legacy_password; grant select on legacy.* to report% identified by report_password;三、主要的安装包服务（一）rhcs部分1.ldap#yum -y install sssd2.autofs#yum -y install autofs3.时间同步#yum -y install chrony（二）rhce部分1.设置samba# yum -y install samba samba-client在desktop上操作# yum -y install cifs-utils.x86_64 samba-

8、client.x86_642.配置NFS服务# yum -y install nfs-utils3.web服务# yum -y install httpd mod_ssl mod_wsgi4.配置iscsi服务端# yum -y install targetcli.noarch5.iscsi客户端发现# yum -y install iscsi-initiator-utils.i6866.部署数据库# yum -y install mariadb*四、防火墙放行1.rhce第二题 配置防火墙(Server和Client机器都需要执行)firewall-cmd -permanent -add-s

9、ervice=sshfirewall-cmd -permanent -add-rich-rule= rule family=ipv4 source address=/24 service name=ssh reject2. rhce第四题 配置端口转发 (Server执行)firewall-cmd -permanent -add-rich-rule= rule family=ipv4 source address=/24 forward-port port=5423 to-port=80 protocol=tcp 3. 第八题 通过samba共享目录 (

10、Server执行)firewall-cmd -permanent -add-service=samba4.第十题 配置nfs服务firewall-cmd -permanent -add-service=nfsfirewall-cmd -permanent -add-service=rpc-bindfirewall-cmd -permanent -add-service=mountd5.第十二题 实现一个web服务器firewall-cmd -permanent -add-service=http6.第十二题 配置安全web服务firewall-cmd -permanent -add-servi

11、ce=https7.第十六题 实现动态web内容firewall-cmd -permanent -add-rich-rule= rule family=ipv4 port port=8909 protocol=tcp accept8.第十九题 配置ISCSI服务端firewall-cmd -permanent -add-rich-rule= rule family=ipv4 source address=2/32 port port=3260 protocol=tcp accept -注意这里的address的子网掩码为329.# firewall-cmd -list-al

12、lpublic (default, active)interfaces: eth0 eth3sources:services: dhcpv6-client http https mountd nfs rpc-bind samba sshports:masquerade: noforward-ports:icmp-blocks:rich rules:rule family=ipv4 source address=/24 service name=ssh rejectrule family=ipv4 source address=2/32 port port

13、=3260 protocol=tcp acceptrule family=ipv4 port port=8909 protocol=tcp acceptrule family=ipv4 source address=/24 forward-port port=5423 protocol=tcp to-port=80五、关于文件下载（一）rhcsa1.ldap: 绑定外部验证服务wget -O /etc/openldap/cacerts/ca.pem http（二）rhce1. 第十题 NFSwget -O /etc/krb5.keytab http:/.keytab2. 第

14、十一题 NFSwget -O /etc/krb5.keytab http:/.keytab3.第十二题 httpdwget -O /var/www/html/index.html http:/.html4.第十三题 httpswget -O /etc/pki/tls/certs/server0.crt http:/.crtwget -O /etc/pki/tls/private/server0.key http:/.keywget -O /etc/pki/tls/certs/ssl-ca.crt http:/.crt5.第十四题 虚拟主机wget -O /var/www/virtual/ind

15、ex.html http:/.html6.第十五题 web访问内容wget -O /var/www/html/private/index.html http:/htmlwget -O /var/www/virtual/private/index.html http:/private.html7. 第十六题 wsgiwget -O /var/www/html/webinfo.wsgi http:/webinfo.wsgi8.第十八题 添加用户脚本wget -O /root/userlist http:/userlist9.第二十一题 配置数据库wget -O /root/users.mdb http:/.mdb六、常见问题：1、vim /etc/my.conf 忘记了 skip-networking=1;2、忘记了时钟同步，所以NFS中的protecd服务起不来；3、ISCSI关机启动后用iscsiadm登陆，