Difference between revisions of "OPS235 Assignment 2"

From CDOT Wiki
Jump to: navigation, search
(Ready to show)
m (Rubric)
 
(16 intermediate revisions by 2 users not shown)
Line 1: Line 1:
= OPS235 Assignment 2 =
+
= Introduction and Purpose =
  
 
'''Weight:''' 5% of the overall grade
 
'''Weight:''' 5% of the overall grade
  
'''Due Date:''' Week 13 <br />Refer to your instructor for submission instructions
+
'''Due Date:''' Week 12
  
 +
'''Submission:''' You will be submitting your completed work through a series of screenshots on Blackboard. (See below.)
  
{{Admon/important|It is YOUR responsibility to Backup your centos3 VM for this Assignment!|You are required to frequently backup your VM prior to exiting a work session during this assignment. Your instructor will NOT accept the fact that your hard disk crashed and lost all of your work. If you properly backed up your VM images and xml configuration files to a USB, then you can purchase a new hard-disk or wipe and recreate your hard disk and restore your VMs.}}<br>
+
In this assignment, you will demonstrate the skills you have learned to this point by configuring two services: a '''database server''' and a '''web server'''. You will install and use a database-backed web application, '''Wordpress''', to show that these services have been installed properly. You will also configure your '''firewall''' to further enhance the security of your computer system.
  
== Introduction and Purpose ==
+
'''NOTE: Do this assignment inside the centos3 virtual machine. '''
  
In this assignment, you will demonstrate the skills you have learned to this point by configuring two services: a '''database server''' and a '''web server'''. You will install and use a database-backed web application, '''Wordpress''', to show that these services have been installed properly. You will also configure the '''SELinux''' security system to further enhance the security of your computer system.
+
{{Admon/important|It is YOUR responsibility to backup your centos3 VM for this assignment!|You are required to frequently backup your VM prior to exiting a work session during this assignment. Your instructor will NOT accept the fact that your hard disk crashed and lost all of your work. If you properly backed up your VM images and xml configuration files to a USB, then you can purchase a new hard-disk or wipe and recreate your hard disk and restore your VMs.}}
  
'''NOTE: Do this assignment inside the centos3 virtual machine. '''
+
= Installing Packages=
 
 
== Installing Packages==
 
  
 
<u>Install these packages using ''yum''</u>
 
<u>Install these packages using ''yum''</u>
Line 30: Line 29:
 
:*Download a "zipped tar-ball" from a website (google-search), decompress, and compile
 
:*Download a "zipped tar-ball" from a website (google-search), decompress, and compile
  
== Configuring Apache ==
+
= Configuring Apache =
  
 
# Start the httpd service using '''systemctl'''.
 
# Start the httpd service using '''systemctl'''.
 
# Ensure that the httpd service starts automatically during boot.
 
# Ensure that the httpd service starts automatically during boot.
# Confirm that you can connect to your web server using a web browser -- both from centos3 (you can test using '''links''') as well as from the host. You should see the Apache Test Page.
+
# Confirm that you can connect to your web server using a web browser -- both from centos3 (you can test using '''lynx''') as well as from the host. You should see the Apache Test Page.
 
# If you can't connect to it from outside the machine - perhaps your firewall is blocking access to the web server.
 
# If you can't connect to it from outside the machine - perhaps your firewall is blocking access to the web server.
  
== Configuring MySQL ==
+
= Configuring MySQL =
  
 
# Start the MySQL service (mysqld or mariadb) using '''systemctl'''.
 
# Start the MySQL service (mysqld or mariadb) using '''systemctl'''.
Line 44: Line 43:
 
#* If you do not see any messages, research how you can secure the MySQL installation and set the MySQL-root password.
 
#* If you do not see any messages, research how you can secure the MySQL installation and set the MySQL-root password.
 
#* Read those messages carefully, you are setting up a production MySQL server and there shouldn't be any "test" databases or anonymous users or users without a password.
 
#* Read those messages carefully, you are setting up a production MySQL server and there shouldn't be any "test" databases or anonymous users or users without a password.
# Set your MySQL root password to your learn ID (without the @senecac.on.ca part).
+
# Set your MySQL root password to your Seneca e-mail username (without the ''@myseneca.ca'' part).
 
# This following part is challenging so take your time and read the instructions to make sure you do it properly, we have to set up a dedicated user and database for wordpress:
 
# This following part is challenging so take your time and read the instructions to make sure you do it properly, we have to set up a dedicated user and database for wordpress:
## Start by looking at http://codex.wordpress.org/Installing_WordPress#Using_the_MySQL_Client where you will find instructions for the setup.
+
## '''NOTE: If you decide to download the wordpress package during this section, please use the 5.0.x version here (use wget): https://wordpress.org/wordpress-5.0.7.tar.gz'''
 +
## Start by looking at https://wordpress.org/support/article/creating-database-for-wordpress/#using-the-mysql-client where you will find instructions for the setup.
 
## You will need to run those commands in a centos3 terminal.
 
## You will need to run those commands in a centos3 terminal.
 
## Your adminusername is root
 
## Your adminusername is root
 
## Your databasename is myblog
 
## Your databasename is myblog
## Your wordpressusername is your learn ID
+
## Your wordpressusername is your Seneca username
## The password should also be your learn ID
+
## The password should also be your Seneca username
 
## Your hostname is localhost
 
## Your hostname is localhost
  
== Installing and Configuring Wordpress ==
+
= Installing and Configuring Wordpress =
  
 
Wordpress (like most web applications) is not available in the Fedora repositories, it must be downloaded and installed manually.
 
Wordpress (like most web applications) is not available in the Fedora repositories, it must be downloaded and installed manually.
  
# Download the latest .tar.gz version from wodpress.org into your centos3 (use wget).
+
# '''Download the latest 5.0.x version of wordpress to your centos3 VM here (use wget): https://wordpress.org/wordpress-5.0.7.tar.gz'''
 
# Extract it into '''/var/www/html'''
 
# Extract it into '''/var/www/html'''
 
# Now we need to allow Apache to modify the wordpress installation. To do this use <b>chown</b> and <b>chgrp</b> with <b>-R</b> option to make the owner and group of every file and directory inside wordpress "apache".
 
# Now we need to allow Apache to modify the wordpress installation. To do this use <b>chown</b> and <b>chgrp</b> with <b>-R</b> option to make the owner and group of every file and directory inside wordpress "apache".
 
# Check your work so far by pointing your web browser to http://centos3/wordpress/ where you will get an error starting with "There doesn't seem to be a wp-config.php file"
 
# Check your work so far by pointing your web browser to http://centos3/wordpress/ where you will get an error starting with "There doesn't seem to be a wp-config.php file"
 
# Copy the wp-config-sample.php file to wp-config.php and edit the new file:
 
# Copy the wp-config-sample.php file to wp-config.php and edit the new file:
#* Change the DB_NAME, DB_USER, DB_PASSWORD to the appropriate values.
+
#* Change the DB_NAME, DB_USER, DB_PASSWORD to the appropriate values. '''(Do not use the root account for your database connection! Marks will be deducted.)'''
 
# Now go back to http://centos3/wordpress/ - you should see a Wordpress Welcome/Setup page.
 
# Now go back to http://centos3/wordpress/ - you should see a Wordpress Welcome/Setup page.
 
#* Set the title to Your Name's Blog. For example for me it would be "OPS235 Professor's Blog"
 
#* Set the title to Your Name's Blog. For example for me it would be "OPS235 Professor's Blog"
Line 70: Line 70:
 
#* Click "Install Wordpress", you should see a "Success!" message.
 
#* Click "Install Wordpress", you should see a "Success!" message.
  
== Write-up ==
+
= Write-up =
  
 
Write a blog post on your new blog explaining:
 
Write a blog post on your new blog explaining:
Line 84: Line 84:
 
''' Make your posts look professional. That means use good english, headings, bullet or numbered lists, etc.
 
''' Make your posts look professional. That means use good english, headings, bullet or numbered lists, etc.
  
== Submitting Your Assignment ==
+
= Configuring iptables =
 +
Now that you've set up your blog, you must secure your firewall. The purpose of this section is to lock down your rules as much as possible.
 +
# You must be using iptables (firewalld should be uninstalled).
 +
# Your INPUT chain's default policy must be set to DROP.
 +
# Create INPUT chain exceptions (rules) to allow connections to your blog.
 +
# Other than the specific ports needed to access your blog, the only other allowed exception is for SSH.
 +
# '''Tip''': Your OUTPUT chain should allow ''all'' traffic. (You can leave it at its default)
 +
 
 +
= Submitting Your Assignment =
 +
 
 +
'''Due date:''' Check with your professor for the due dates on this assignment and how they choose to mark it. Assignments submitted after the due date will receive a grade of 0, but must still be completed satisfactorily in order to pass the course.
  
'''Due date:''' Your name will be called in the lab on the due date for the assignment. If you are not there when your name is called - you will lose 20% of your mark. In that case you may show me your submission in the second lab that week instead. Assignments submitted after that will receive a grade of 0, but must still be completed satisfactorily in order to pass the course.
+
== Online Submission Requirements ==
  
=== Ready to show ===
+
All screenshots must be full c7host desktop captures, and contain no errors. The fewer total images, the better. Submit through Blackboard, unless told otherwise by your professor.
  
Open one or more terminals in c7host, SSH to centos3 from those terminals, and have the following ready:
+
Open one or more terminals in c7host, SSH to centos3 from those terminals, and screenshot the following:
* The correct RPMs are installed
+
* List of additional RPMs installed for the assignment
* Status of the '''mysql''' service
+
* Status of the ''mysql'' service
* Status of the '''httpd''' service
+
* Status of the ''httpd'' service
* MySQL output of: '''show databases; use mysql; select User,Password from user; use myblog; show tables;'''
+
* MySQL output of the chained command: '''<code>show databases; use mysql; select User,Password from user; use myblog; show tables;</code>'''
* Output of: '''ls -la /var/www/html/wordpress/'''
+
* Output of command: '''<code>ls -la /var/www/html/wordpress/</code>'''
* Output of: '''head -30 /var/www/html/wordpress/wp-config.php'''
+
* Output of command: '''<code>head -30 /var/www/html/wordpress/wp-config.php</code>'''
* Output of: '''iptables -L -vn --line-numbers'''
+
* Output of command: '''<code>iptables -L -vn --line-numbers</code>'''
* Open a Firefox window to: http://centos3/wordpress/
+
* Open a Firefox window to: '''http://centos3/wordpress/'''
  
=== Rubric ===
+
== Rubric ==
  
 
{| class="wikitable" border="1"
 
{| class="wikitable" border="1"
Line 119: Line 129:
 
| iptables rules configured correctly || 2 ||
 
| iptables rules configured correctly || 2 ||
 
|-
 
|-
| Everything ready to show || 2 ||
+
| Blog accessed using local hostname resolution || 2 ||
 
|-
 
|-
 
| First blog post || 3 ||
 
| First blog post || 3 ||
Line 125: Line 135:
 
| Second blog post || 3 ||
 
| Second blog post || 3 ||
 
|-
 
|-
| '''Total''' || 20 ||  
+
| '''Total''' || '''20''' ||  
  
 
|}
 
|}
  
 
[[Category:OPS235]]
 
[[Category:OPS235]]
 +
[[Category:Summer 2020]]
 +
[[Category:Digital Classroom]]

Latest revision as of 00:24, 3 August 2020

Introduction and Purpose

Weight: 5% of the overall grade

Due Date: Week 12

Submission: You will be submitting your completed work through a series of screenshots on Blackboard. (See below.)

In this assignment, you will demonstrate the skills you have learned to this point by configuring two services: a database server and a web server. You will install and use a database-backed web application, Wordpress, to show that these services have been installed properly. You will also configure your firewall to further enhance the security of your computer system.

NOTE: Do this assignment inside the centos3 virtual machine.

Important.png
It is YOUR responsibility to backup your centos3 VM for this assignment!
You are required to frequently backup your VM prior to exiting a work session during this assignment. Your instructor will NOT accept the fact that your hard disk crashed and lost all of your work. If you properly backed up your VM images and xml configuration files to a USB, then you can purchase a new hard-disk or wipe and recreate your hard disk and restore your VMs.

Installing Packages

Install these packages using yum

  • httpd - this is the Apache web server software.
  • php - this is the PHP server software, which allows Apache to run more complex websites.
  • php-mysql - this is a PHP extension that allows PHP to use a MySQL server.


Install the mysql-server (MySQL database server) package

NOTE: This package may not be in the main repository. There a couple of options:

  • Preferred method: Use an alternative package (for example: mariadb and mariadb-server)
  • Download a "zipped tar-ball" from a website (google-search), decompress, and compile

Configuring Apache

  1. Start the httpd service using systemctl.
  2. Ensure that the httpd service starts automatically during boot.
  3. Confirm that you can connect to your web server using a web browser -- both from centos3 (you can test using lynx) as well as from the host. You should see the Apache Test Page.
  4. If you can't connect to it from outside the machine - perhaps your firewall is blocking access to the web server.

Configuring MySQL

  1. Start the MySQL service (mysqld or mariadb) using systemctl.
  2. Ensure that the mysqld/mariadb service starts automatically during boot.
  3. You may get messages after starting the MySQL service for the first time. Do not ignore these messages, it will tell you how to set a password and take other basic steps to secure the the MySQL server. Follow those instructions to set a password, recording the detail of what you do for later use.
    • If you do not see any messages, research how you can secure the MySQL installation and set the MySQL-root password.
    • Read those messages carefully, you are setting up a production MySQL server and there shouldn't be any "test" databases or anonymous users or users without a password.
  4. Set your MySQL root password to your Seneca e-mail username (without the @myseneca.ca part).
  5. This following part is challenging so take your time and read the instructions to make sure you do it properly, we have to set up a dedicated user and database for wordpress:
    1. NOTE: If you decide to download the wordpress package during this section, please use the 5.0.x version here (use wget): https://wordpress.org/wordpress-5.0.7.tar.gz
    2. Start by looking at https://wordpress.org/support/article/creating-database-for-wordpress/#using-the-mysql-client where you will find instructions for the setup.
    3. You will need to run those commands in a centos3 terminal.
    4. Your adminusername is root
    5. Your databasename is myblog
    6. Your wordpressusername is your Seneca username
    7. The password should also be your Seneca username
    8. Your hostname is localhost

Installing and Configuring Wordpress

Wordpress (like most web applications) is not available in the Fedora repositories, it must be downloaded and installed manually.

  1. Download the latest 5.0.x version of wordpress to your centos3 VM here (use wget): https://wordpress.org/wordpress-5.0.7.tar.gz
  2. Extract it into /var/www/html
  3. Now we need to allow Apache to modify the wordpress installation. To do this use chown and chgrp with -R option to make the owner and group of every file and directory inside wordpress "apache".
  4. Check your work so far by pointing your web browser to http://centos3/wordpress/ where you will get an error starting with "There doesn't seem to be a wp-config.php file"
  5. Copy the wp-config-sample.php file to wp-config.php and edit the new file:
    • Change the DB_NAME, DB_USER, DB_PASSWORD to the appropriate values. (Do not use the root account for your database connection! Marks will be deducted.)
  6. Now go back to http://centos3/wordpress/ - you should see a Wordpress Welcome/Setup page.
    • Set the title to Your Name's Blog. For example for me it would be "OPS235 Professor's Blog"
    • Set the password to your learn ID.
    • Set the email to your Seneca email address.
    • Click "Install Wordpress", you should see a "Success!" message.

Write-up

Write a blog post on your new blog explaining:

  • What is Apache, PHP, MySQL, and Wordpress.
  • What problems (minor and major) you ran into during the installation and how you solved them.

Write a second post on your blog explaining:

  • Are you ready for the exam or not.
  • List the material you are strong on.
  • List the material you are worried about.
  • List any questions or topics you would like me to address during exam review.

Make your posts look professional. That means use good english, headings, bullet or numbered lists, etc.

Configuring iptables

Now that you've set up your blog, you must secure your firewall. The purpose of this section is to lock down your rules as much as possible.

  1. You must be using iptables (firewalld should be uninstalled).
  2. Your INPUT chain's default policy must be set to DROP.
  3. Create INPUT chain exceptions (rules) to allow connections to your blog.
  4. Other than the specific ports needed to access your blog, the only other allowed exception is for SSH.
  5. Tip: Your OUTPUT chain should allow all traffic. (You can leave it at its default)

Submitting Your Assignment

Due date: Check with your professor for the due dates on this assignment and how they choose to mark it. Assignments submitted after the due date will receive a grade of 0, but must still be completed satisfactorily in order to pass the course.

Online Submission Requirements

All screenshots must be full c7host desktop captures, and contain no errors. The fewer total images, the better. Submit through Blackboard, unless told otherwise by your professor.

Open one or more terminals in c7host, SSH to centos3 from those terminals, and screenshot the following:

  • List of additional RPMs installed for the assignment
  • Status of the mysql service
  • Status of the httpd service
  • MySQL output of the chained command: show databases; use mysql; select User,Password from user; use myblog; show tables;
  • Output of command: ls -la /var/www/html/wordpress/
  • Output of command: head -30 /var/www/html/wordpress/wp-config.php
  • Output of command: iptables -L -vn --line-numbers
  • Open a Firefox window to: http://centos3/wordpress/

Rubric

Task Maximum mark Actual mark
Correct packages installed 1
Apache set up and running 2
MySQL set up correctly 3
Wordpress extracted correctly 1
Wordpress set up correctly 2
Wordpress showing in Firefox 1
iptables rules configured correctly 2
Blog accessed using local hostname resolution 2
First blog post 3
Second blog post 3
Total 20