due May 10. PLEASE ANSWER THE QUESTIONS PROPERLY AND INCLUDE ALL THE SCREENSHOTS NECESSARY!
Assignment #4 – Networking and Permissions Description In this assignment, you will learn some networking basics in Windows and Linux. This will include creating users, creating a CIFS file share, and NFS export and setting permissions on the file system. Once the CIFS share and NFS export are setup with appropriate permissions, you will then mount them from the other device (NFS from Windows and CIFS from Linux) using your newly created user accounts. The deliverables of this project will be a Microsoft Word document with screenshots of the processes described below. Additionally, there will be a series of questions throughout this assignment that should be answered in your Word document. This is an individual assignment. All work should be independent. Requirements The following sections will take you through the process of configuring the networking, permissions, and shares. In this assignment, you will need to have both virtual machines running at the same time. If needed, you can reduce your memory and/or CPU assignments to each VM to get them both running at the same time. Connecting to Linux and Windows using remote protocols Up to this point, you have been using your hypervisor to connect to the Windows and Linux servers. However, both OSs provide easier ways to connect. For Windows, Remote Desktop (RDP) and for Linux, SSH. · For Windows, you will need to enable Remote Desktop by going to Server Manager, selecting “Local Server” and clicking where it says “Remote Desktop Disabled” and enabling it. After that, you can close the window showing your Windows server (but leave it running), on your own computer, run the “mstsc.exe” command and connect to your server using the IP address you have assigned. When you connect, you will need to connect as another user and use “administrator” as your username and the same password you have been using. · SCREENSHOT: (showing that you have connected remotely using Remote Desktop) · On Linux, you need to install SSH. This is pretty easy and really only takes two commands. First, install the “tasksel” utility by typing “sudo apt install tasksel” (may actually already be installed). Then use tasksel to install ssh by typing “sudo tasksel install openssh-server”. After that, you can use an SSH client, such as PuTTY, to connect to the Linux server using the IP address and your username and password on the Linux server. · SCREENSHOT: (showing the established SSH connection to your server) Creating users on Windows and Linux For the next sections of this assignment, you will be using new user accounts on both your Windows and Linux servers. · On Windows, from Server Manager, click on Tools and select “Computer Management”. In Computer Management, expand “Local Users and Groups” and select “Users”. In the “More Actions” menu on the right, click on “New User”. Name this user “winuser1” and take off the check box for “User must change password at next login”. You can set any password you like (do not use special characters), just don’t forget it. Do the same for a user named “winuser2”. · SCREENSHOT: (showing the newly created user accounts in the Users window in Computer Mangement”) · On Linux, you first create the user by typing “sudo adduser linuser1”, then set the password for that user when prompted (do not use special characters). You will be prompted for other information about the user. That can all be blank. Create another account called “linuser2” and again, don’t forget the password. · SCREENSHOT: (showing the useradd and passwd commands for both users) · QUESTIONS: · On the linux computer, run the following four commands, then answer the questions: · sudo cat /etc/passwd · sudo cat /etc/group · From the passwd file, what is the user ID (or UID) for the linuser1 account? The linuser2 account? · From the group file, what is the group ID (or GID) for the linuser1 group? The linuser2 account? · From the group file, who is/are the member(s) of the sudo group? What does this group do? Sharing files from Windows (CIFS) In this exercise, you will create a file share on the Windows server with two folders, one for winuser1 and one for winuser2. This will simulate creating a file share for personal user shares to allow users to store files on a server. Then you will mount the share on the Linux server to access the files. · First, create two new folders in the new drive that you created in the last assignment (this assignment assumes it is “E:/”, but whatever drive letter you have is fine). The folders should be named “Users” and “Users2”. Set the NTFS permissions on each folder such that the “Administrators” group has full control, the “system” user has full control, your own user account has full control, and the “Users” group has read ONLY (no special permissions). You can set permissions by right-clicking on the folder, then clicking on “Properties” and selecting the “Security” tab. First you will need to set the folder to not inherit the permissions by selecting “Advanced” and select “Disable Inheritance”. When prompted, you should copy the permissions rather than removing them. · In the “Users” folder, create two additional folders, “winuser1” and “winuser2”. The NTFS permissions of these folders should allow “Administrators” full control, “System” full control, your account full control, and the corresponding user should have Modify rights and the “Users” group should not be listed. You can break inheritance and set the permissions individually on the folder. · SCREENSHOT: (showing the permissions for the winuser1 folder) · Now you need to share the two folders (Users and Users2). Shares have a second layer of permissions. For this assignment, we will rely on the NTFS permissions, so you should set the share permissions to Everyone having full control. To create the share, right click on the folder, and select Properties and click on the “Sharing” tab. Select “Advanced Sharing” and check the checkbox for “Share this folder”. Then set the share permissions by clicking on “Permissions” with Everyone having full control. The “Users” folder should be shared as “Users” and the “Users2” folder should be shared as “Users2$”. · SCREENSHOT: (open a command prompt and type “net share”) · QUESTIONS: · Click on start and type “\\
\”, replacing with the IP address of your Windows server. · Why do you only see the share for “Users”? · To mount a CIFS share from a Linux client, you need to have some additional software. In the case of Ubuntu, you need to install the “cifs-utils” package by typing “sudo apt install cifs-utils”. Once that is installed, you can mount the folder, but first you need somewhere to mount it. Create a folder under /mnt on your Linux server called “Users” by typing “sudo mkdir /mnt/Users”. · QUESTIONS: · Run “ls -la /mnt” · What are the user and group owners set to? What permissions does the user have? What permission does the group have? What permissions does everyone else have? Try running “touch /mnt/Users/file.txt”. Note: You can google “understanding linux permissions” and will find quite a bit about permissions on Linux. · Now change the user and the owner of this folder to your user account created in Assignment 2 (should be your CPP username). You can do this by typing “sudo chown : /mnt/Users”, replacing with your username. · SCREENSHOT: (showing the output of “ls -la /mnt” after setting the user and group for the directory) · To mount the share, run each of the commands below. NOTE: For the user information, use “winuser1” and for the SMB_SERVER, use “///Users”, using the Windows server IP address. NOTE: the slashes are backwards from what you may be used to when mounting a CIFS share on Linux (/) vs. on Windows (\). You will also need to find the UID and GID for your user account from the /etc/passwd and /etc/group files and replace and in the mount.cfis command below with those values. · SMB_USERNAME= · SMB_PASSWORD= · SMB_SERVER=”//IPAdressOfYourWindowsVM/Users” · sudo mount.cifs ${SMB_SERVER} /mnt/Users -o user=${SMB_USERNAME},pass=${SMB_PASSWORD},uid=,gid= · Now try to create files under /mnt/Users, /mnt/Users/winuser1, and /mnt/Users/winuser2. An easy way to do this is using the “touch” command (touch /mnt/Users/filename.txt). That will just create a file named whatever you specify. · SCREENSHOT: (showing the output of “ls -la /mnt”) · SCREENSHOT: (showing the output of “ls -la /mnt/Users”) · QUESTIONS: · What were the results of trying to create files in those three locations? What happens if you try to list the contents of the directories “ls /mnt/Users”, “ls /mnt/Users/winuser1”, “ls /mnt/Users/winuser2”? Which ones work and which do not? · Run “ls -la /mnt/Users” and see what the Linux permissions are set to. Does it appear that you should have permissions to all of the folders? · If you can’t list the contents or create files in some of the directories, but the Linux permissions look like you should, what could be going on that is preventing you from doing those things? · Go ahead and unmount the CIFS share by typing “sudo umount /mnt/Users”. Sharing files from Linux (NFS) This portion of the assignment will be somewhat the opposite of the last section. In this part, you will create an NFS export on the Linux server and mount it on the Windows server. · The first step is to install the NFS server on the Linux server. To do this, run “sudo apt install nfs-kernel-server”. · Next create a directory on the new volume you created in the last assignment. Type “sudo mkdir /mnt/data/export”. Change the owner of this folder by typing “sudo chown linuser1:linuser1 /mnt/data/export”. Then change the permissions by typing “sudo chmod 775 /mnt/data/export”. · Next you need to modify the /etc/exports file. We are going to create two exports. One for the directory you just created, and one for the /home folder. The export directory would be similar to what would be done for a process to mount a remote file system. Exporting the /home directory would be similar to the user shares that we created in the last section. To modify the file, type “sudo nano /etc/exports”. You will need to add two lines to this file (follow the sample syntax in the /etc/exports file and change to the Windows server IP address): · /mnt/data/export(rw,sync,no_subtree_check) · /home(rw,sync,no_root_squash,no_subtree_check) · SCREENSHOT: (showing the /etc/exports file after modification) · QUESTIONS: · Explain each of the options that we are using above and what they do in your own words. · Restart the NFS