Red Hat Certified Engineer Tutorials
System Service Analysis / Service and Application Access Controls
Visitors to VTC.com will be able to view all introductory videos for each training course.
Free Trial Members will gain access to first three chapters for each training course.
Full Access Members have full access to VTC.com�s entire library of video tutorials.
Learn More
Subtitles of the Movie (Red Hat Certified Engineer / System Service Analysis / Service and Application Access Controls)
In this video we discuss service and application access control, which describes how access can be limited to certain services by user and group. Look at some basic network services: NFS, FDP, Samba, and HTTP. As for NFS, there is no direct application access control by user or user group, at least as configured in etc slash exports. However, NFS sharers are mounted and configured locally as if it were a local directory, so any control, in other words, ownership and permissions of local files and directories can also be used to regular ownership and permissions to remotely mounted NFS sharers. But that's based on an appropriate authentication database, so it may also require a proper NIS or LDAP server. FTP sharers can be somewhat regulated by user, based on the default vsftpd service, vs standing for "very secure" users in the ftp users file are prohibited from access from the ftp service. You can add users as you desire to this list. Samba servers are controlled by a different user name password database. This authentication database can be on a remote system if the domain password server is also remote. It can be on a local system if the local Samba system is on a domain controller. In that case, the database may be in the etc slash samba slash smbpasswd configuration file. There are also additional controls in the Samba configuration file based on read list and write list directives. These directives can specify allowed users or allowed groups. All you need to specify a group is the "at" symbol in front. HTTP service access can also be controlled by a password and user name database. If there's an AccessFileName directive in the appropriate directory stanza, access to that directory is limited and based on user names and passwords in an associated password file as created by the htpasswd command.
Tutorial Information
| Course: | Red Hat Certified Engineer |
| Author: | Michael Jang |
| SKU: | 33845 |
| ISBN: | 1-934743-47-X |
| Release Date: | 2008-01-18 |
| Duration: | 6.5 hrs / 94 lessons |
| Captions: | No |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |
VTC Sign up & Benefits
- Unlimited Access
- 81,350 Video Tutorials (14,200 free)
- Video Available as Flash or QuickTime
- Over 715 Courses
- $30 for One Month Access
- Multi-User Discounts Available
