Linux - LPIC-3 Mixed Environments

ATENCIÓN: En caso de pertenecer al programa LaaS Cert la formación es sin examen incluido

Curso oficial de Linux LPI: LPIC-3 Mixed Environments - Preparación de examen 300 más examen de regalo

La certificación LPIC-3 es la culminación del programa de certificación profesional multinivel del Linux Professional Institute (LPI). LPIC-3 está diseñado para el profesional de Linux de nivel empresarial y representa el nivel más alto de certificación de Linux profesional y de distribución neutral dentro de la industria.

Se encuentran disponibles tres certificaciones de especialidad LPIC-3 separadas. Aprobar cualquiera de los tres exámenes otorgará la certificación LPIC-3 para esa especialidad.

Objetivos

Este curso cubre los temarios para la preparación del examen 300 , necesarios para la certificación LPIC-3 Mixed Environments. 

Para recibir la certificación LPIC-3 Enterprise Mixed Environment, debe estar certificado LPIC-2 y aprobar el examen 300.

La certificación LPIC-3 Enterprise Mixed Environments cubre la administración de sistemas Linux en toda la empresa en un entorno mixto.

Contenidos para la certificación

Para obtener la certificación LPIC-3 Enterprise Mixed Environments, debe aprobar el examen 303. Los temas del examen abarcan: 

• Topic 301 Samba Basics
  
• Topic 302: Samba and Active Directory Domains
  
• Topic 303: Samba Share Configuration
  
• Topic 304: Samba Client Configuration
• Topic 305: Linux Identity Management and File Sharing
  

Examen LPIC-3 300

Topic 301: Samba Basics

301.1 Samba Concepts and Architecture

Candidates should understand the essential concepts of Samba, including the various Samba server processes and networking protocols used by Samba when acting in various roles. Samba version 4.8 or higher is covered.

Key Knowledge Areas:

• Understand the roles of the various Samba daemons and components
• Understand key issues regarding heterogeneous networks
• Understand the networking services used with SMB/CIFS and Active Directory, including their ports
• Understand the major features of SMB protocol versions 1.0, 2.0, 2.1 and 3.0
• Understand of Samba 3 and Samba 4 differences
• Awareness of Samba VFS modules
• Awareness of Samba Clustering and CTDB

301.2 Samba Configuration

Candidates should be able to configure the Samba daemons.

Key Knowledge Areas:

• Manage Samba server file-based configuration
• Manage of Samba server registry-based configuration
• Manage of Samba configuration parameters and variables
• Understand Samba server roles and security modes
• Configure Samba to use TLS
• Check the validity of a Samba configuration
• Troubleshoot and debug configuration problems with Samba
• Understand Windows tools used to configure a Samba Server

301.3 Regular Samba Maintenance

Candidates should know the various tools and utilities that are part of a Samba installation.

Key Knowledge Areas:

• Start and stop Samba services on domain controllers and file servers
• Monitor and interact with running Samba daemons
• Backup and restore TDB files
• Backup and restore an Active Directory domain controller
• Understand backup and recovery strategies for Active Directory domain controllers
• Understand the impact of virtualization on Active Directory domain controllers

301.4 Troubleshooting Samba

Candidates should be able to analyze and troubleshoot Samba issues. This includes accessing and modifying the LDAP content of a Samba server hosting an Active directory as well as working with trivial database files. Furthermore, candidates should be able to create a renamed clone of an existing Active Directory for debugging.

Key Knowledge Areas:

• Configure Samba logging, including setting log levels for specific debug classes and client-specific logging
• Query and modify the Samba password database
• Understand the contents of important TDB files
• List and edit TDB file content
• Identify TDB file corruption
• Access and modify objects in a Samba LDAP directory
• Enable and use the LDAP recycle bin
• Confirm the integrity of a domain controller’s database
• Create a renamed clone of a domain controller
• Awareness of Samba eventlog shipping
• Use rpcclient to query information on a Samba server

 Topic 302: Samba and Active Directory Domains

302.1 Samba as Active Directory Domain Controller

Candidates should be able to configure Samba as an Active Directory domain controller. This includes managing an Active Directory domain.

Key Knowledge Areas:

• Understand the concepts of Active Directory
• Understand the principles of the network services used by Active Directory (i.e. DNS, Kerberos, NTP and LDAP and CIFS and MS-RPC)
• Set up a new Active Directory domain using Samba
• Add a Samba domain controller to an existing Active Directory domain
• Demote and remove online and offline domain controllers
• Verify AD replication
• Understand and query the global catalog and the partial attribute set
• Understand and configure domain functional levels
• Understand and configure Active Directory forest and domain trusts
• Understand and configure Active Directory sites, including subnet assignments
• Understand and manage FSMO roles, including their impact in case of an outage
• Configure authentication audit logging
• Configure SYSVOL replication using rsync or robocopy
• Integrate Samba with ntpd
• Awareness of Windows NT4 domains

302.2 Active Directory Name Resolution

Candidates should be familiar with the internal DNS server of Samba.

Key Knowledge Areas:

• Understand and manage DNS for Samba as an AD domain controller
• Manage DNS records in Samba DNS
• DNS forwarding
• Standardized names in an Active Directory
• Multicast DNS
• Awareness of BIND9 DLZ DNS back end
• Awareness of NetBIOS name resolution and WINS

302.3 Active Directory User Management

Candidates should be able to manage user and group accounts on a standalone server and in a Samba based Active Directory.

Key Knowledge Areas:

• Manage user accounts and user group for standalone servers and Samba AD
• Knowledge of user account management tools
• Delegate administrative permissions in AD to specific users / user groups
• Configure password expiration and change requirements
• Manage password policies and password setting objects
• Understand principals and their identification SID (DN, GUID)
• Understand User Principal Name (UPN) and User Principal Name Suffix (UPN Suffix)
• Understand and manage Security and Distribution Groups
• Understand and manage LDAP attributes of security principals
• Understand and manage RFC2307 attributes in a Samba AD
• Map Kerberos service principal names to user accounts
• Export Kerberos keytabs for a specific principal
• Awareness of LDAP Account Manager

302.4 Samba Domain Membership

Candidates should be able to join a Samba server into an existing Active Directory domain and authorize domain users to use the server. This includes installing and configuring the Winbind service.

Key Knowledge Areas:

• Join Samba to an existing AD domain
• Configure Winbind service, including ID mapping
• Understand and configure Winbind ID mapping, including various mapping backends
• Configure PAM and NSS to use Winbind

302.5 Samba Local User Management

Candidates should be able to create and manage local user accounts on a stand alone Samba server.

Key Knowledge Areas:

• Setup a local password database
• Perform password synchronization
• Knowledge of different passdb backends
• Convert between Samba passdb backends

Topic 303: Samba Share Configuration

303.1 File Share Configuration

Candidates should be able to create and configure CIFS file shares in Samba.

Key Knowledge Areas:

• Create and configure CIFS file shares
• Manage Samba share access configuration parameters
• Use registry based share configuration
• Manage profile and user home shares
• Plan file service migration
• Limit access to IPC$
• Awareness of user shares
• Awareness of existing VFS modules and their general functionality, including modules to support audit logs and snapshots / shadow copies

303.2 File Share Security

Candidates should understand file permissions on CIFS shares and on a Linux file system.

Key Knowledge Areas:

• Enforce ownership and permissions of files and directories
• Manage ACLs for shares and folders
• Understand POSIX, Extended POSIX and Windows ACLs
• Understand how Samba stores Windows ACLs in Linux ACLs and extended attributes
• Configure ACLs for profile and home folder shares
• Configure encryption of CIFS connections

303.3 DFS Share Configuration

Candidates should be able to create and manage DFS shares in Samba.

Key Knowledge Areas:

• Understand DFS
• Configure DFS shares

303.4 Print Share Configuration

Candidates should be able to create and manage print shares in Samba.

Key Knowledge Areas:

• Understand Samba printing, including raw printing
• Create and configure print shares
• Configure integration between Samba and CUPS
• Manage Windows print drivers and configure downloading of print drivers
• Upload printer drivers using ‘Add Print Driver Wizard’ in Windows
• Preconfigure driver settings
• Configure paper sizes and forms
• Supported driver versions
• Manage GPO options for trusted print servers
• Awareness of spoolssd

Topic 304: Samba Client Configuration

304.1 Linux Authentication Clients

Candidates should be familiar with management and authentication of user accounts. This includes configuration and use of NSS, PAM, SSSD and Kerberos for both local and remote directories and authentication mechanisms as well as enforcing a password policy. 

Key Knowledge Areas:

• Understand and configure NSS and PAM
• Enforce password complexity policies and periodic password changes
• Create home directories for new users
• Lock accounts automatically after failed login attempts
• Configure NSS and PAM to retrieve information from LDAP
• Configure SSSD authentication against Active Directory, IPA, LDAP and Kerberos domains and the local system’s authentication database
• Manage local accounts through SSSD
• Obtain and manage Kerberos tickets

304.2 Linux CIFS Clients

Candidates should be able to use remote CIFS shares from a Linux client. This includes client-side management of CIFS credentials and managing remote ACLs and quotas.

Key Knowledge Areas:

• Access remote CIFS shares from a Linux client
• Mount remote CIFS shares on a Linux client
• Automatically mount home directories
• Store and manage CIFS credentials securely
• Understand and manage permissions and file ownership of remote CIFS shares
• Understand and manage quotas on CIFS shares

304.3 Windows Clients

Candidates should be able to access CIFS and print shares from Windows hosts and join such hosts into an Active Directory domain. Furthermore, candidates should be able to manage Windows hosts using GPOs and access remote Windows hosts.

Key Knowledge Areas:

• Understand how to set up and use Windows hosts
• Join a Windows host to an Active Directory domain
• Access remote CIFS shares from a Windows client
• Configure printing to remote printers from a Windows client
• Configure file and print shares on a Windows host
• Understand the concept, structure and capabilities of GPOs
• Create and modify GPOs and apply GPOs to machines or users
• Access a remote Windows desktop
• Create and configure logon scripts
• Configure roaming profiles for Active Directory users
• Configure profile folder redirects

Topic 305: Linux Identity Management and File Sharing

305.1 FreeIPA Installation and Maintenance

Candidates should be able to set up and manage a FreeIPA domain using standard settings and default services. This includes setting up replication and joining clients to the domain. 

Key Knowledge Areas:

• Understand the features, architecture as well as server-side and client-side components of FreeIPA
• Install a FreeIPA server
• Set up and manage a FreeIPA domain using standard settings and default services
• Understand replication topology and configure FreeIPA replication
• Join clients to an existing FreeIPA domain
• Awareness of ipa-backup

305.2 FreeIPA Entity Management

Candidates should be able manage users, hosts and services in a FreeIPA domain.

Key Knowledge Areas:

• Manage user accounts and groups
• Manage hosts, hostgroups and services
• Understand the principle of IPA access control permissions, privileges and roles
• Understand ID views
• Awareness of sudo, autofs, SSH, SELinux and NIS integration as well as host based access control in FreeIPA
• Awareness of the FreeIPA CA

305.3 FreeIPA Active Directory Integration

Candidates should be able to set up a cross-forest trust between a FreeIPA and an Active Directory domain.

Key Knowledge Areas:

• Understand and set up FreeIPA and Active Directory integration using Kerberos cross-realm trusts
• Configure ID ranges in FreeIPA
• Understand and manage external non-POSIX groups in FreeIPA
• Awareness of Microsoft Privilege Attribute Certificates and how they are handled by FreeIPA
• Awareness of replication based FreeIPA and Active Directory integration

305.4 Network File System

Candidates should be able to use NFSv4. This includes understanding ID mapping, NFSv4 ACLs and Kerberos authentication for NFS.

Key Knowledge Areas:

• Understand major NFSv4 features
• Configure and manage an NFSv4 server and clients
• Understand and use the NFSv4 pseudo file system
• Understand and use NFSv4 ACLs
• Use Kerberos for for NFSv4 authentication

Idioma

Los componentes de aprendizaje e-Learning sobre los que se realiza la formación se encuentran en inglés y en español.

Idiomas para el examen disponibles en los centros de pruebas de VUE: Inglés, alemán, japonés, portugués (brasileño), chino (simplificado), chino (tradicional), español (moderno).

Idiomas para el examen disponibles en línea a través de OnVUE: Inglés, japonés, portugués (brasileño), español.

Requisitos