© 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Security Strategies in Linux Platforms and Applications Lesson 8 Networked Filesystems and Remote Access

Page 2 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Learning Objective  Describe Linux file-sharing and remote access solutions.

Page 3 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Key Concepts  File-sharing with Network File System (NFS) and Samba  Secure remote access tools  Encryption with Secure Shell (SSH) and the Internet Protocol Security (IPsec) protocol

Page 4 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. DISCOVER: CONCEPTS

Page 5 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Common Network Services Software File Sharing SambaNetwork File System (NFS) Has built-in interoperability with Windows clients Generally faster than Samba when transferring large files Can be set up as a member server in Windows environment Easy to set up Has username/password authentication Authentication is Internet Protocol (IP)-based; however, it can support Kerberos Can configure to squash root

Page 6 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Common Network Services Software (Continued)  Web server  Database  Authentication and directory services  and printing  File Transfer Protocol (FTP)

Page 7 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Remote Access Tools Open Berkeley Software Distribution (BSD) Secure Shell (OpenSSH)  SSH client commands  Port 22  Authentication  X11 forwarding  Port forwarding

Page 8 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Remote Access Tools (Continued) Internet Protocol Security (IPsec)  Authentication Header (AH) and Encapsulated Security Payload (ESP) protocols  Internet Key Exchange (IKE) protocol Racoon  Free Secure Wide-Area Networking (FreeS/WAN)  StrongSwan and Openswan

Page 9 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Remote Access Tools (Continued) Secure Sockets Layer (SSL)  An SSL virtual private network (VPN) connection uses the traditional SSL over Hypertext Transfer Protocol (HTTP) certificates.  SSL VPN is easier to configure and setup than IPsec.  OpenVPN is the most popular Linux-based SSL VPN solution.

Page 10 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. DISCOVER: PROCESS

Page 11 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Configuring Samba

Page 12 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Configuring Samba (Continued)

Page 13 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. DISCOVER: ROLES

Page 14 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Authentication

Page 15 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Kerberos

Page 16 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. DISCOVER: RATIONALE

Page 17 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. The Problem with Clear Text

Page 18 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Telnet vs. SSH

Page 19 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. Summary  File-sharing with Network File System (NFS) and Samba  Secure remote access tools  Encryption with Secure Shell (SSH) and the Internet Protocol Security (IPsec) protocol

Page 20 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. OPTIONAL SLIDES

Page 21 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. A Request for a Passphrase

Page 22 Security Strategies in Linux Platforms and Applications © 2013 Jones and Bartlett Learning, LLC, an Ascend Learning Company All rights reserved. An /etc/racoon/racoon.conf File