Windows® Integration with Samba

• Introduction to Samba & Clients
  • Explore Samba server configuration
  • Identify key Samba packages & contents
  • Explore the SMB workgroup implementation
  • Discuss the roles of Local Master Browsers (LMBs) & Domain Master Browsers (DMBs)
  • Use findsmb & smbclient to reveal the active browse lists
  • Discuss NETBIOS naming rules
  • Identify system broadcast address & discuss broadcast-based NETBIOS name resolution
  • Identify & discuss the roles of the key Samba daemons
  • Use smbtree to enumerate the active workgroups, hosts & file & print shares
  • Install rdesktop client for remote desktop connectivity to Windows 2003 Server
  • Explore browse list & SMB clients from Windows 2003
  • Share file resource on Windows 2003 Server for use by Samba clients
  • Join common workgroup from Windows 2003 host
  • Use smbclient to enumerate & connect to shared resources on XP/2003 hosts
  • Explore anonymous and authenticated share enumeration using smbclient
  • Transfer files between Samba and Windows 2003 hosts using smbclient
  • Use smbget to download files non-interactively from remote SMB server
  • Use smbclient with credentials stored in a hidden file
  • Create tarball archive using tar & discuss Samba's smbtar utility
  • Create tar-compatible archives of remote SMB-share using smbtar
•  
• Samba File System (SMBFS) Integration
  • Discuss the features & benefits of SMBFS
  • Identify package & files
  • Create temporary mount point for remote SMB share
  • Mount remote SMB share into local Linux file system using SMBFS
  • Examine resultant Linux file-system permissions post SMBFS mount
  • Transfer files to mount point (Remote Windows 2003 system) & examine results
  • Identify SMBFS process footprint
  • Mount remote SMB share with previously-defined hidden credentials file
  • Modify system startup file to facillitate automatic SMBFS mounts upon system restart
•  
• Workgroup & Windows Internet Naming System (WINS) Integration
  • Identify key Samba configuration file & package membership
  • Use findsmb to reveal available workgroups
  • Alter Samba configuration file to join available workgroup
  • Identify key TCP/UDP ports used by key Samba daemons
  • Use findsmb & browse list to confirm workgroup membership
  • Enumerate default Samba shares on primary Linux system using smbclient
  • Introduction to smbpasswd utility and database
  • Use smbpasswd to add Windows user to database & confirm authentication from Windows host
  • Install WINS Server on Windows 2003 Server for use by SMB-clients
  • Explain default Samba NETBIOS name resolution order
  • Identify name resolution order directive in primary Samba configuration file
  • Configure Samba server to be a WINS client via Samba configuration file
  • Confirm WINS NETBIOS registrations of Samba & Windows hosts
•  
• Samba Share-Level File & Print Security Implementation
  • Discuss Samba's security modes
  • Discuss the features & benefits of share-level security
  • Alter primary Samba configuration file to support share-level security
  • Define and publish a public read-only share
  • Reload key Samba daemons & confirm connectivity to read-only share
  • Enumerate & connect to public read-only share from a remote Samba client
  • Define & publish an anonymous read-write share
  • Use chmod & chown to define appropriate permissions and ownership on the directory
  • Confirm the ability to write to read-write share from remote Windows 2003 system
  • Examine applied permissions & ownership of created objects on the Linux file system
  • Define & publish a private read-write share
  • Confirm authentication to private read-write share from remote Windows 2003 host
  • Update Samba back-end database to reflect new user - test connectivity
  • Compare & contrast Windows & Samba hidden share definition
  • Define hidden share & explore browse list from Samba & Windows hosts
  • Convert existing shares to hidden shares and examine updated browse list
  • Discuss default Samba print sharing implementation
  • Explore Common UNIX Printing System (CUPS) interface
  • Install and configure a printer
  • Discuss various CUPS back-end capabilities
  • Discuss the CUPS-generated printcap file
  • Explore key Samba print-related configuration directives
  • Share the printer using Samba
  • Connect to printer from Windows host and test printing
•  
• Samba Web Administration Tool (SWAT)
  • Discuss the features & benefits of Samba SWAT
  • Explore XINETD system configuration for the presence of Samba SWAT
  • Install Samba SWAT from the local package repository
  • Update XINETD configuration to enable Samba SWAT & confirm TCP listener
  • Authenticate to Samba SWAT as non-privileged and privileged users
  • Examine current smbd & nmbd connections
  • Explore & discuss the key tools included with Samba
  • Correlate Samba's primary configuration file to Samba SWAT's web interface
  • Discuss the key directives in the global section of the Samba SWAT web interface
  • Discuss additional directives in the advanced view of the Samba SWAT global area
  • Adjust the OS Level and examine the changes to the role in the browse list
  • Discuss Samba WINS server rules & limitations
  • Explore shares configuration
  • Correlate shares section of main config file to Samba SWAT's shares interface
  • Discuss the effects of various share directives
  • Discuss the variable homes share and its applications
  • Explain Samba's create mask directive & examine its application
  • Examine the advanced Samba SWAT shares view & discuss key directives
  • Define valid & invalid users per share & test connectivity from remote Windows host
  • Force ownership of file & directory objects using the force user directive
  • Explore & discuss advanced printer share directives
  • Define multiple NETBIOS names and view results in the browse list
•  
• Samba User-Level Security Mode
  • Explain the advantages and features of user-level security
  • Discuss the user-accounts back-ends supported by Samba
  • Convert Samba from share-level to user-level security mode
  • Test user-level connectivity to Samba shares/services
  • Discuss IPC$ connections and applications
  • Explore passwd & shadow user-accounts databases
  • Explore the smbpasswd database
•  
• Samba - Active Directory (AD) - BIND Integration
  • Discuss the DNS requirements of Active Directory
  • Install BIND from RPM repository
  • Configure BIND as a caching-only name server
  • Define usable BIND named.conf configuration file with appropriate zones
  •  
  • Define required Active Directory dynamically updateable zones
  • Install Active Directory on Windows server
  • Confirm BIND DNS connectivity
  • Configure Kerberos to support Active Directory Realm & test connectivity
  • Convert Samba from basic user-level to ADS security mode
  • Use the net command to create Samba machine account in the Active Directory
  • Confirm authentication against Active Directory when accessing resources
  • Create AD -> Linux corresponding users for transparent access
•  
• Samba - Winbindd
  • Discuss the features & advantages of Winbind
  • Discuss the accounts resolutions process
  • Alter the name server switch process to facilitate winbind
  • Discuss UNIX/Linux uids & gids
  • Explain the application of idmaps - uids & gids
  • Configure Samba to use Winbind
  • Enumerate remote Active Directory users using wbinfo & getent
  • Examine auto-assigned uids & gids via idmap
  • Connect to Samba server using Active Directory users & Winbind
  • Configure SSHD to support Winbind-provided users from Active Directory
  • Configure Winbind to use the default Active Directory domain for authentication
  • Configure VSFTPD to use the default Active Directory domain for authentication
•  
• Samba - Linux File System & Share/Service Permissions
  • Explain how Samba interacts with file-system permissions
  • Explain UNIX/Linux file-system permissions - UGO
  • Use chown/chmod to adjust file-system permissions
  • Discuss the applicable Samba share/service permissions directives
  • Apply various share/service permissions & test results
•  
• Samba - Miscellaneous
  • Create share/service with appropriate permissions for collaborations
  • Examine collaborative permission from Windows client
  • Configure Samba as a WINS server & discuss capabilities
  • Configure Samba a print server for SMB(Windows/Linux/UNIX) clients
  • Explore Samba logging
  • Mount remote CIFS shares into the Linux file system
  • Share mounted CIFS directories using Samba
•  

Sums

• Various Tools
• Remote Confirmations
• File Metadata
• File Fragments
• Compress Content
• Archive Content
• DIR Hierarchy
• Password Sums
• Shared Secret
• Restrict History
• Downloaded Content
• Encrypt Content
• Site Credentials
• Site COOKIE
• Site COOKIE - Unique

CentOS9x Stream Administration

• Initial Environment
• ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami
• alias, cat, file, chmod, chown, history
• STD(IN|OUT), Pipes, Redirection, Command Chaining
• ps, df, top, free
• Pagers, W-Commands
• Checksums
• Awk | Sed | Grep Usage
• BASH SHELL Environment
• Compression | Archival Tools
• SSH Equivalence
• SHELL Quoting
• Propagate Environment
• Secure Clients

• Identify Standard File Types
• Standard File Permissions
• Symbolic Links
• Transfer Permissions

• Identify SWAP environment
• Provision dedicated SWAP partitions
• Add | Remove SWAP from pool as needed
• Provision File System-based SWAP
• SWAP Share
• SWAP Persistence
• Identify default storage configuration
• Provision new storage as needed
• XFS - File System
• XFS - Grow File System
• Identify LVM defaults
• Add new partitions to LVM management
• Allocate storage to LVM Volume Groups
• Create Logical Volumes (LVs) as needed
• Overlay File System and mount where applicables
• LVM - Resize
• LVM - Mixed FS
• LVM - SWAP

• Features
• Install
• Defaults
• General Usage
• Update Accounts

• Defaults
• Shared PASS Gen
• Unique PASS Gen
• Encrypted PASS Gen
• Update Accounts
• Groups

• Discuss features | limitations
• Identify default system-wide schedule
• Peruse various default Cron Jobs
• Schedule simple job and monitor recurrence
• Evaluate results

• Peruse Default CONF
• Discuss Syslog Rules
• Explore Log Rotate defaults
• Ensure rotated logs are compressed
• Extend default retention scheme
• Force Log Rotation as needed

• Explore Default environment
• Install PKGs
• Dump important metadata from packages
• Apply Updates

• Default CONF
• Add | Confirm IPs as needed

• Install
• Copy Configuration
• SELinux - Confirm
• TLS | SSL Services
• cURL Client Tests
• Virtual Hosts
• ENC Sites Only

• SFTP Only USER
• SFTP Only USER - NOLOGIN
• SFTP Only Group - Control
• NMap Intro

SysLOG with rSysLogD

• Discuss Features
• Default Environment
• Kernel Firewall LOG
• Split LOGs by Priorities
• UDP | TCP Logging
• Dual L4 Logging
• Multiple Hosts
• Basic Queueing
• Reliable Event Logging Protocol (RELP)
• RELP - Remote Only
• RELP Only
• Traditional to RELP
• SysLOG Clear-Text - Confirm
• Property Filters
• Expression Filters
• Relay Chain

Netfilter Tables

• Features
• SSHGuard
• Ruleset Basics
• Persistence
• Sample Rules
• Inbound Filtering
• Dormant Table
• Manage Tables | Chains | Rules
• Counters
• Sets
• LOG Basics
• LOG with Sets
• Closed-Port LOGs
• LOG Options
• Re-Route LOGs
• Jump Targets
• Chain Jumping
• GoTo Chains
• Meta Selectors

Debian 12x Administration

• Features
• Download
• Graphical Install
• Text Install
• Post-Install Tweaks

• Explore usage of the following useful commands
• tty | /dev/pts | w | whoami | who
• set | env | export | unset
• cat | echo | touch | rm
• pwd | ls | cd | mkdir | alias | umask
• head | tail
• dd
• find
• history
• STDIN, STDOUT, STDERR, UNIX Pipes, Redirection, Command Chaining
• ps, df, free, top, dd
• stat, which, w, who
• tar | gzip | bzip2 | xz
• ZSH Setup

• Network Tools | IP Configuration
• Examine default IP configuration
• Extend IP configuration to facilitate additional addresses
• Static IP Config
• Dual: Dynamic | Static Config
• Multiple Interfaces
• Dual Network Services
• Confirm communications

PHP One-Liners

• General Usage
• Count Lines
• Word Count
• Count Chars
• Split Lines into ARRAY
• Count Instances of Fields
• Transform Delimiters
• Anonymize LOGs
• Extract Unique SRCs
• Lines by Error Code
• LOG By Code
• Summarize Error Codes
• Pre-Seed Error Codes
• Random Strings
• Varied Passwords
• Expose Undefined Passwords
• Outdated Passwords
• Hash | Un-Hash

Cloud Storage with GlusterFS

• Discuss Features:
• Default Volume Type
• Common Volume Types
• Transport Types
• File System Support
• Storage Model

• Features
• Provision Storage
• Allocate GlusterFS Brick
• Persistence
• Generate IO
• Multiple File Systems
• Various Sizes
• Stop | Remove Volume
• Reconstitute Volume
• Server Mount
• Evaluate

OpenPGP with GPG

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Signing | Verification

• Features
• General Usage
• Create Content
• Encrypt
• PassPhrase Protect
• Binary | Text Encryption
• Share
• Decrypt

SSL-TLS with OpenSSL

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Certificate Signing Requests (CSRs)
• Self-Signed Certificates
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Random String Generation
• Message Digests
• SSL-TLS Client

• Features
• General Usage
• Retrieve Site Certificates
• Determine OCSP Configuration
• Probe supported TLS Versions
• Extract Certificate for local usage
• Retrieve Certificate with NMap
• Retrieve Certificate Chain

• Discuss
• Generate Private Keys
• Generate Correlating CSRs
• Confirm Keys | CSRs
• Self-Signed Certificates

SSH Variables

• Discuss Features
• Bare VARs
• SSH Client
• Double Quotes
• Single Quotes
• SSH Environment

SHELL Variables

• Discuss Features
• Terminal (TTY)
• CLI Arguments
• Process ID
• Backgrounded
• SHELL Local
• Environment
• Persistence
• Aliases
• Command Substitution
• Increment | Decrement
• Dynamism