System Administration 2018 exam.
- NB! 2018 exam practice demo machine can be accessed from http://sa.cs.ut.ee/pub/sa18-teacher-broken.7z
- When: 2 last weeks of semester (21 of May 2018 - 03 of June 2018) during your registered lab time or preannounced examination times for e-learning groups.
First exam attempt | |||
DATE | TIME | ROOM | COMMENTS |
21. May | 18-20 | L2-123 | Allowed to register only from Group 1. |
23. May | 12-14 | L2-123 | Allowed to register only from Group 2. |
23. May | 18-20 | L2-123 | Allowed to register only from Group 3. |
24. May | 10-12 | L2-123 | Allowed to register only from Group 5. |
24. May | 14-16 | L2-205 | Allowed to register for all e-groups (Group 4. 7. 8.) |
24. May | 18-20 | L2-123 | Allowed to register only from Group 6. |
25. May | 12-14 | L2-205 | Allowed to register for all e-groups (Group 4. 7. 8.) |
Second exam attempt | |||
28. May | 18-20 | L2-123 | NO REGISTRATION ALLOWED, 1st attempt participation list will be used |
30. May | 12-14 | L2-123 | NO REGISTRATION ALLOWED, 1st attempt participation list will be used |
30. May | 18-20 | L2-123 | NO REGISTRATION ALLOWED, 1st attempt participation list will be used |
31. May | 10-12 | L2-123 | NO REGISTRATION ALLOWED, 1st attempt participation list will be used |
31. May | 14-16 | L2-205 | NO REGISTRATION ALLOWED, 1st attempt participation list will be used |
31. May | 18-20 | L2-123 | NO REGISTRATION ALLOWED, 1st attempt participation list will be used |
01. June | 12-14 | L2-205 | NO REGISTRATION ALLOWED, 1st attempt participation list will be used |
Final Grade best of 2 exam attempts |
- Where: Physically in Juhan Liivi 2 class 123 or lab 205 (no online exams allowed)
- Duration: You will be given exactly 2 hours from the start.
- Help: Indirect help is ALLOWED (including Google, your own physical or digital notes, lab machine and so on). Direct communication with a physical person or virtual friend online (Skype, Facebook, e-mail, chat pages and so) will result in immediate FAILURE.
- How:
- You will be given a broken VDI file, you have to get it up and running in either your laptop or classroom machine.
- Example: unbroken vdi of teacher2.yks
- Example2: broken exam vdi from wednesday
- The shared VDI will contain Debian 9 64-bit installation (amd64 pae kernel).
- Virtualbox is preferred virtualizer (but any should work).
- You have to bridge your virtual machine's network adapter to physical machine's incoming adapter "Ethernet" (or WiFi adapter).
- You will not know any of the passwords
- You must decide best Virtualbox settings based on your hardware and virtualized operating system
- Number of Processors
- Amount of Memory
- PAE and/or VT-x support for Acceleration
- USB and Network settings
- You will be given a broken VDI file, you have to get it up and running in either your laptop or classroom machine.
By the end of exam you must get all the same services working with new domain and IP address as in the Labs with similar setting adjusted to new network schema including:
- DNS for resolving own domain as well as world wide addresses
- Mail for internal delivery (only inside your own domain using Thunderbird and Roundcube)
- Apache (all the declared virtual hosts available in your domain, defaults to HTTPS)
- NFS services (either Quota, Samba, NFS, nextCloud) depending of the exam
- Monitoring
Environment:
- Network: Class network uses IP range
192.168.10.0/24
and you should choose any free IP from the same rangenmap -sP 192.168.10.0/24
can be used to help choose.
- Gateway
192.168.10.1/24
- No separate DNS servers, your VM should be your own DNS after you fix it.
- Domain: In each exam you will be presented with a different top level domain (i.e.
.ykz
,.upz
,.dog
,.pig
etc) from the labs configured.est
.- For sub-domian name you can use
any
but the sameut_loginname
is preferred. So in case the TLD is.cat
and your login ismylogin
the domains likemylogin.cat
andsomethingelse.cat
are OK.
- For sub-domian name you can use
- Grading: - Best of 2 attempts will be your final grade
- F – any of
Virtual Machine
ordig @192.168.10.X www.google.com
ordig @192.168.10.X ut_login.ykz
not working fails exam (GradeE
will be RECECT'ed by teachers FIREWALL) - D –
DNS
up and working (adjusted to changes) - C –
mail
(Thunderbird can receive and send e-mail) orapache
(secure Roundcube login or other page display) - B –
mail
+apache
both working without issues - A –
everything working
in timely manner, that teachers throw at you (from the list of topics covered in labs and lectures)
- F – any of
- Command Hints:
The order of following commands depends on what you fix first.
- Check if you have new hostname applied
hostname
- find unused IP address:
nmap -sP 192.168.10.0/24
- Test Default Gateway:
ping 192.168.10.1
- Test The Internet:
ping 8.8.8.8
- Check what server is used for resolving:
cat /etc/resolv.conf
- Check if any DNS can be reached (for example Google) and can resolve ut.ee
dig @8.8.8.8 ut.ee
- Check if your own DNS can resolve world wide addresses (here X is last octed of your own IP) and can resolve ut.ee
dig @192.168.10.X ut.ee
- Check if your own DNS can resolve your own domain
dig @192.168.10.X ut_login.estNS
- Check the Mail exchange host for your domain (here X is last octed of your own IP)
dig @192.168.10.X utlogin.est MX
- Check if the resolver can actually resolv
nslookup www.google.com
andnslookup utlogin.est
- Check active Firewall rules with
iptables -S
oriptables -L -n
- Check if your laptop/classroom machine can access your Virtual Server
ping 192.168.10.X
andping mail.<yourdomain>.est
if not add your Server IP as primary DNS in laptop (client). - check
status
of servicespostfix
,dovecot
andapache
witsystemctl status postfix.service -l
- Server can send e-mail locally using
alpine
and throughThunderbird
- With
lynx
check if apache pages can be reached locally from serverlynx https://www.<yourdomain>.est
- Check if
https://www.<yourdomain>.ykz
can be reached from a client (your laptop) - Check if
http://webmail.<yourdomain>.ykz
will be routed toroundcube
login page andHTTPS
. - Check if you can log into
roundcube
and test sending e-mail to different user. - Check if new secure vhost exam.ut_login.est with userdir module serving only user tester with PHP
- Commands
named-checkconf
,named-checkzone
,postconf -n
,doveconf -n
andapachectl -S
might help you too. - Common log files to check for errors:
- /var/log/syslog
- /var/log/mail.log
- /var/log/bind9/
- /var/log/dovecot/
- /var/log/apache2/
- /var/log/
- More useful commands:
- Checking in what file and at what line the value occurs (over multiple files):
grep -Hni <value> <file.*>
- Here
-H
highlights file name - Here
-n
highlights line number - Here
-i
for case insensitive search
- Here
grep -Hni <value> <*.conf>
- Checking in what file and at what line the value occurs (over all files in directory):
grep -RHni <value> <dir>
- Here
-R
for recursive traverse over directory contents
- Here
- Checking in what file and at what line the value occurs (over specific files in directory):
find <dir> -iname '.conf' -exec grep -Hni <value> {} \;
- Here
<dir>
where to look for files - Here
-iname '.conf'
how to match file names - Here
-exec <cmd>
what to execute on each matched file - Here
{}
substituting the matched filenames intogrep -Hni <value> <file>
command - Here
\;
terminating the-exec
closure of find command
- Here
- Filtering not commented lines:
gerp -v '#' <file>
- Checking in what file and at what line the value occurs (over multiple files):