how do you grab a kerberos keytab from a server? Correct Ans-wget -O /etc/krb5.keytab
http://classroom.example.com/pub/keytabs/<yourkeytab>.keytab
explain the difference between wget, wget -O and wget -O-. Correct Ans-wget <url> will pull
a file with whatever filename it has. -O <filename> <url> names the file it pulls in. -O- pulls to
stdout.
how would you specify kerberos with integrity checking in fstab for an nfs share? Correct
Ans-sec=krb5i instead of "defaults"
list the contents of serverX's smb share. Correct Ans-smbclient -L //serverX
mount serverX's smb share in your filesystem. authenticate to the share as a guest. use a
command. Correct Ans-mount -t cifs -o guest //serverX/share /<mountpoint>
won't work unless you've created the mount point already with mkdir.
how does a smb share show up in fstab? Correct Ans-//serverX/share /mountpoint cifs guest
00
,mount serverX's smb share in your filesystem. authenticate to the share as a user with the most
secure method possible. use a command. Correct Ans-mount -t cifs -o
credentials=/secure/<user> //serverX/<share> /<mountpoint>
where /secure/<user> contains:
username=<un>
password=<pw>
domain=<dn>
what's the difference between autofs for smb and nfs? Correct Ans-both require subconfigs
under auto.master.d ending in .autofs formatted as <mountpoint> /etc/auto.<share>
what package has to be installed for smb to work? Correct Ans-cifs-utils
what's the recommended permissions for a secure creds file for smb authentication? Correct
Ans-0600
give an overview of the boot process. Correct Ans-1) post
2) bios loads
, 3) mbr partitions checked for bootloader location
4) grub2 bootloader takes over loads os selection, waits for user
5) filesystem read on selected os, kernel loaded in memory and initialized
6) systemd loads and checks fstab
7) fstab devices are mounted, and the system is remounted on /sysroot, the kernel takes over
8) systemd looks for default target (graphical, emergency, etc) and launches to it.
how can you set a default systemd boot target? Correct Ans-systemctl set-default
<target>.target
bonus: what does rd.break actually do? Correct Ans-pauses the system before the initramfs
boot process hands off control to systemd. the prompt you get after rd.break is an initramfs
debug shell.
bonus: what does chroot do? what's a chroot jail? why use it? Correct Ans-changes the
apparent root of the filesystem tree. a chroot jail is an execution environment for a process that
doesn't allow it access to the full filesystem. it's used to isolate non-root processes from the
operating system.
bonus: why do you need to run touch /.autorelabel when doing the break-in? Correct Ans-
because passwd recreated /etc/shadow without any selinux context.
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller TheeGrades. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $12.99. You're not tied to anything after your purchase.