The RHCSA/RHCE Red Hat Linux Certification Study Guide 6th Edition is now available!
 

Folks,

With the approval of moderator acid_kewpie (Chris), I'm pimping the 6th edition of my Red Hat study guide. It covers all objectives for both the Red Hat Certified Systems Administrator and Red Hat Certified Engineer exams.

It's now available at least from Amazon and Barnes & Noble. The link to the Amazon listing is here: http://www.amazon.com/RHCSA-Linux-Ce...dp/0071765654/ . In the "From the Author" section, I've provided a detailed description of what's in the book.

The official detailed description is available from McGraw-Hill, at http://www.mhprofessional.com/produc...sbn=0071765654 . It's more up to date than the Amazon listing (yes, the 6th edition is over 1000 pages.)

I'll try to answer any questions that you may have on this book. I'll do my best to keep up to date with this board for at least a couple of months, and address any problems that you might find.

While I hope I didn't make any mistakes, I'm human. If you find an error, post it here. If you need more information on exam objectives than what you've been able to find in the book, ask a specific question here. Of course, I won't tell you what's on the exam. I will do my best to show you how to learn more about a specific published Red Hat objective. To that end, I may refer to you a specific page or chapter for more information.

Of course, if you like the book, I would appreciate a positive review on a site like Amazon :)

Thanks,
Mike

Be aware that you are on something of a narrow ledge here. On one side, there is the idea that allowing 'random' (please don't take this personally) individuals to advertise their works is not entirely encouraged; on the the other side, there are clearly members who have a need to know more about this and related subjects, and this topic (what book should I get for...) does come up repeatedly - OK, not daily, but certainly something like monthly.

I'll make a couple of points:

• posting, eg, a table of contents would give members a better idea of the contents of the book and whether it is likely to cover any particular subject in which they are interested; as an aid to members, I would think of that as allowable (but if a mod wants to disagree, you'd have to go with their determination on the subject)
• my advice to anyone looking for a study book is to actually have a look at a few; some you will get on with, others you won't. Bearing that in mind, I don't want to be perceived as recommending or counter-recommending any particular book, but the fact that there is another book which is a potential aid to anyone seeking this kind of help is generally a good thing

FWIW, I did ask one of the moderators for permission beforehand, and have been in contact with Jeremy on the subject. Jeremy has just (more recently) asked that I make sure to include content in my posts.

I appreciate your comments, and your points are good. As my comments on the alternative book would be biased, I'll just include a link to the Amazon listing at http://www.amazon.com/Hands--Guide-R...dp/0321767950/

In addition, as requested, I include the basic TOC here, with two comments:

1) Chapters 1-9 is focused on helping readers learn tasks associated with the RHCSA; Chapters 10-17 is focused on helping readers learn tasks associated with the the RHCE.
2) Most of the labs (and all four sample exams) are --only-- on the CD, so the reader is forced to simulate the "electronic delivery" previously announced by the Red Hat Director of Certification.

Chapter 1: Prepare for Red Hat Hands-on Certifications
Chapter 2: Virtual Machines and Automated Installations
Chapter 3: Fundamental Command Line Skills
Chapter 4: RHCSA-Level Security Options
Chapter 5: The Boot Process
Chapter 6: Linux Filesystem Administration
Chapter 7: Package Management
Chapter 8: User Administration
Chapter 9: RHCSA Level System Administration Tasks
Chapter 10: A Security Primer
Chapter 11: System Services and SELinux
Chapter 12: RHCE Administrative Tasks
Chapter 13: Electronic Mail Servers
Chapter 14: The Apache Web Server
Chapter 15: The Samba File Server
Chapter 16: More File Sharing Services
Chapter 17: Administrative Services: DNS, NTP, and Logging
Appendix A: Prepare a System for the Sample Exams
Appendix B: Sample Exam 1: RHCSA
Appendix C: Sample Exam 2: RHCSA
Appendix D: Sample Exam 3: RHCE Sample Exam 1
Appendix E: Sample Exam 4: RHCE Sample Exam 2
Appendix F: About the CD

Hi all,

I am new around here and this is my first post. Although i am using this forum for a long time to solve my doubts.

Well now i have decided to do a RHCSA/RHCE Certification and wanted to buy this book by Michael Jang. But unfortunately in India, this book hasn't been released yet and also on amazon UK. I don't want to spent a huge amount to get it imported.
Do you guys know when this will be released in India or on amazon UK.
If you guys know, please let me know

Thanks
Silverstone

Dear Silverstone,

The public date for release at amazon.co.uk is 15 August, ref http://www.amazon.co.uk/RHCSA-Linux-...dp/0071765654/ . In India, I do see it on 20North.com, ref http://www.20north.com/RHCSA-RHCE-Re...$@!&src=search .

Thanks Mike.

The book is also available on Flipkart in India http://www.flipkart.com/books/007176...ZXBb6SsJfGzQ--. But these are imported ones and they cost much more than what we get in India usually.

Also on Amazon UK, which i have noticed it now, the publish date is mentioned as 18th July and not 15th August.

Guess i will have to shell more and wait for 15+ days to get it delivered. :(

Thanks,
Silverstone

Error on page 579
 

Mike:

Thank you for all your hard work on this book. I may have found an error on page 579, under "Regulate Access to SSH". The book says to add these:

-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -j SSH_CHAIN
-A SSH_CHAIN -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 3 --rttl --name SSH -j DROP

But I had to add some extra lines to make it work properly:

-N SSH_CHAIN
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -j SSH_CHAIN
-A SSH_CHAIN -m recent --set --name SSH
-A SSH_CHAIN -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 3 --rttl --name SSH -j DROP

I just purchased the book im really looking forward to using it. Im new to the linux world and trying to get a RHCSA, ive been using the "Hands-on Guide to the Red Hat® Exams: RHCSA™ and RHCE® Cert Guide and Lab Manual" and it hasent been the greatest reference for a newbie but ive looked at the previous addition of your book and im sure your current addition will be a great help.

Dear greenleaf108,

Yup, you're right. Thank you for your correction. To elaborate, the four rules do the following:



1) Set up the SSH_CHAIN set of rules to isolate SSH traffic:

-N SSH_CHAIN

2) Take that traffic destined for port 22 (--dport 22) and redirect it to the SSH_CHAIN:

-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -j SSH_CHAIN

3) Mark the packet with the source address (--set --name SSH):

-A SSH_CHAIN -m recent --set --name SSH

4) Finally, the third hit from the noted source address within 60 seconds (i.e.: two authentication attempts) is dropped:

-A SSH_CHAIN -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 3 --rttl --name SSH -j DROP

Dear gesparza,

As I wrote this book with more experienced users in mind, the topics may be a bit difficult for you.

But it sounds like you've started studying Linux in some format, and will be interested in hearing about your experiences with the RHCSA here. If it's too difficult, one alternative is to start with the LPIC Level I certs.

thanks for the advice mike ill keep that in mind. One benefit i do have is i live with a very knowledgeable RHCE who has been guiding through the whole process hes advised me take the Redhat cert path he says it by far the most respected Linux cert in the industry.

How can I get it in HongKong as quick as possible?

The best is that I can buy it directly in bookstore.

Thanks

Dear gujia3166,

I'm sorry, I'm not qualified to answer such detailed sales related questions. Contact information for McGraw-Hill reps in Asia (including Hong Kong) is available from http://www.mcgraw-hill.com/site/abou...s/asia-pacific .

It looks like McGraw-Hill has three offices in Hong Kong. I suggest you use the McGraw-Hill Education contact listed in the noted URL.

HI All,

I am very new in this forum.

I just started linux and looking for certification.
So anyone can help me that from where i can get 6th version of redhat pdf.

please reply me if anyone heav idea on that.

Is there any simulation lab for doing practice.

Regards

Viren

Dear viren,

Thank you for your question!

PDFs and lab simulations are available on the CD that comes with my book. It's available from many online retailers; a link to the Amazon page for the book is shown atop the thread. If you're completely new to Linux, you might consider studying for the LPI Level I exams first.

Thank you mike, I will try to call them.

I am going to give my thumbs-up for this book! I bought the previous edition which was based on RHEL5, and it helped me IMMENSELY when I was studying for my RHCSA.

FYI, I've submitted my first set of errata to the publisher. But I fully expect it to be a continuous process, and stand ready to hear more. One reader has pointed out that on p423, Ch 7, Figure 7-3 is a duplicate of Figure 7-4. The correct version of Figure 7-3 is attached to this message.

Please report RHCSA/RHCE book errata soon
 

FYI, if you've found errors other than what's already been reported on my book, I'd appreciate hearing about it in the next couple of days or so.

I've submitted my first batch of errata, and hope it'll be available a couple of weeks after I give the go-ahead.

Any update on errata?

I'm scheduled to take RHCSA course at the end of September. I've found your book very helpful!! I've only been a Linux/Vmware systems engineer for 4 months but have been going to college for 2 1/2 years completing an AAS in Linux networking. I also received my L+ and LPIC-1 certs. I'm excited and nervous about the course!

Thanks for all of your hard work on the book!

I promise to post here when errata is available on the mheducation.com website. I'm hopeful that it'll be there in the next few days. It should be listed at http://www.mhprofessional.com/getpag...ta.php&cat=112 .

Thanks for your kind words on my book. If/when you're comfortable doing so, I'd appreciate a five-star review on Amazon with your thoughts.

Is Red Hat the best form of linux to get certified in as far as for work goes? I am new here, I am trying to figure out what certificates would be best to get first. I figure microsoft and linux are the biggest. Microsoft server 2008 and 2011, and I know linux runs on my work computers. I've seen my computer be booted up in linux, emptied out and then windows was re-installed remotely. I hear Linux is a popular choice for most businesses. Is Red Hat the main form I should study for my caree?

Dear netto12,

While I think the Red Hat certs are best, the answer to your question is "it depends". For example, what version of Linux do you use at work?

One reason why I think Red Hat certs are an excellent choice is the way the exams are given. They are based on all "practical" questions. The questions are based on the objectives listed for exams such as the RHCSA (ref http://www.redhat.com/certification/rhcsa/objectives/ ) and the RHCE (ref http://www.redhat.com/certification/rhce/objectives/ ). During the exam, you sit down at an actual Red Hat system and are asked to configure it to a list of requirements. The score you get depends solely on the way you configure your Red Hat system in the time given.

Based on the practical nature of the Red Hat exams, they are perhaps the most respected exams in the Linux arena. (However, the people behind the LPI exams strongly dispute that claim, and that can be a long discussion. SUSE has their own certifications too.)

If you're new to Linux, the Red Hat certs might be a bit too difficult. Many newer Linux users take the LPI level 1 certs first.

Book Errata
 

FYI, errata for the 6th edition is now available from http://www.mhprofessional.com/produc...sbn=0071765654

Click on the errata link in the left side of the page.

Thanks everyone for your patience!

Awesome, Thanks Mike!

Hello Michael,
I downloaded the errata from the link you gave, but the file "0071765654_Errata_10-14-11.txt" within the archive refers to another file "0071765654_Errata_8-25-11.txt" apparently with more errata. Where can I find this earlier errata file?
Thanks

Dear gonk23,

I gather there was an error in processing new errata from Oct 14, accidentally overwriting the original errata. Original errata from 8-25 attached. (I will delete it from this message as soon as it reappears in some form on the MHprofessional.com site.)

11/8 update

(Since the updated errata is now on the MHprofessional.com site, I deleted the errata from the attachment here.)

Thanks!

setting up test environment
 

I have a physical box with one ethernet nic @ 192.168.1.104. This machine has access to internet through home router/gateway at 192.168.1.1

I have server1 vm with 192.168.122.10 with 192.168.122.1 as GW. VM nic is set to NAT to eth0.

So 2 different networks. I have ip forwarding enabled and i see the rule in ip tables.
I cant get access to internet on VM. What am I doing wrong?

Dear yelena1,

I don't have enough info from your note.

Have you tried the ping commands in Chapter 3, from the localhost through your public IP address?

Have you made sure the DNS server in /etc/resolv.conf is good and is also accessible?

Hi:

I'm in canada and ordered this book as well. I can't seem to find anywhere I can buy exam vouchers or where I can actually take the exam. The Red Hat site talks about certification but doesn't say where or how you can take the exam. It does say it's around $400 and exam. Anyone have this info? or can point me in the right direction?

Cheers

Dear Viper9,

The Red Hat exams are officially "courses" starting with EX. For more info, see https://www.redhat.com/courses/ ,

For example, the RHCSA exam is EX200.

FYI, the info on exam signups is also in the Front Matter, pages xlv -- xlvii

So you're saying I have to do the courses to get certified? I can't self study and challenge the exam? Hell I'm not pay $2,400 for level 1 Red Hat lol

No I'm not saying that. Please click through, and you'll see for yourself. (example: https://www.redhat.com/courses/ex200_rhcsa_exam/ shows $400)

If you click through, you'll see that EX200 and EX300 are 1/2 day "courses" that are exams. That's the reason for the EX prefix, and they cost $400 each.

You may be confusing EX200 and EX300 with RH200 and RH300, which include instruction.

Just want to give Mr Jang a big THANK you for you study guide. I've used your book twice now both with good results :-)

-C

Dear custangro,

Your kind words are appreciated. I hope you can let others know the secret of your success ;)

Iam new to linux but want to get both Linux certs. Ihave installed min centos install no gui. For the test(s) do you use gui or CLI?

Dear Rodger,

First, if you're completely new to Unix-type operating systems, you may want to consider an entry-level Linux certification first, such as the level 1 exams of the Linux Professional Institute. However, from the stories I've heard, many users who are experienced in other Unix-based operating systems such as Solaris or BSD have success when jumping straight to Linux.

If you're not sure, you may want to take one of the pre-assessment questionnaires provided by Red Hat. One for the RHCSA is available from https://www.redhat.com/courses/rh135...d_rhcsa_exam/; click the "Pre-Assessment Questionnaires" on the right-hand side of the pae.

Second, to answer your question, the Red Hat objectives do not specifically require the use of the CLI or the GUI. In fact, based on the objectives as written, you could get and solve problems in either the GUI or the CLI. In fact, it doesn't matter what you use to say configure SELinux, as long as you meet the requirements of the problem that you're given. Many admins believe that it's faster to administer from the CLI. However, Red Hat also provides several excellent GUI configuration tools. I demonstrate how you can use both the CLI and the GUI to solve many problems in my book.

Third, there are more than two Linux certifications, so when you say
it's not clear what you mean. In the context of this thread, I assume that you want to qualify for both the RHCSA and RHCE. Just be aware, there are several other Linux certs, including some more advanced certs from Red Hat.

Just went for the RHCSA yesterday, the book was very helpful.
I have noticed 2 errors / omissions concerning first half of the book:

1. page 381, just before Certification objective 6.06, /etc/crypttab entries are wrong
- it should be:
- luks-opened device is used in /etc/fstab, not /etc/crypttab

2. securing basic ftp service
- iptables should be setup with nf_conntrack_ftp module, otherwise ftp service won't work correctly in passive mode. You'll get errors trying to list directories or download stuff:
Finding the module:
Including it in iptables configuration:
- edit /etc/sysconfig/iptables-config
- find line with IPTABLES_MODULES="", and replace it with IPTABLES_MODULES="nf_conntrack_ftp"
- restart the iptables service:
service iptables restart
(of course, tcp port 21 should be opened as well :))

EDIT:
Scratch second one. nf_conntrack_ftp is added automatically by system-config-firewall or system-config-firewall-tui. It is only a problem if you edit iptables configuration by hand ;). But anyway, it's worth noting.

Dear stef80,

I appreciate the kind words, and the corrections. You're right on both accounts (including the edit). I do monitor this thread. Saw your note yesterday, just had time to sit down and confirm what you've said. If you have any more corrections, or questions related to the RHCE, do feel free to let me know here.

Chapter 17. - just 3 notes about Bind (named) configuration.

1.) "nemeserver" directive in /etc/resolv.conf on DNS server "needs" to point to loopback device address (127.0.0.1) or server's own IP address. Whatever is written in "listen-on port" directive in /etc/named.conf ... I guess.
reference:
http://www.redhat.com/magazine/025nov06/features/dns/
I'm not really sure if it's needed or if it's just a good practice.
EDIT: it is needed only for localhost resolving. Not really necessary, but good for testing named service from DNS server itself.

2.) rndc utility is not working by default. There's no rndc.key after installing bind* packages (at least not on RHEL 6.2).
Procedure to get it working:
After /etc/rndc.key is generated, we need to edit /etc/named.conf.
We add "controls" section and include rndc.key:
After that:
Also, TCP port 953 needs to be allowed in firewall configuration.

rndc should work after that.

3.) I had problem with dnssec options in /etc/named.conf
It seems "dnssec-lookaside auto;" statement needs to be commented out for named to work.
Either that or setting "dnssec-enable" and "dnssec-validation" to "no".
I'm not really into dnssec so I don't know if that's OK or not.

Dear stef80,

You're correct, I've left out a couple of things from Chapter 17, w/r/t the configuration of bind. Per your specific points:

1) On p 953 of the book, in the /etc/named.conf file, I already do note a required change to the listen-on-port directive, to include two addresses; 127.0.0.1 the local IP address on the network card.

2) You're right about the missing rndc.key file, and your commands for setting it up are spot on. However, as we're talking 'basic configuration', all you need to add to the /etc/named.conf file is

include "/etc/rndc.key";

(You don't need the controls stanza.)

You don't need to open port 953 -- unless this DNS server is exchanging databases with others. And since this is a local network-only caching or forwarding name server, exchanging databases is not required.

3) I've checked, and the default dnssec* options work for me. In any case, such security options go beyond basic operation.

Thank you for taking the time to show me some of the errors that remain in the book. I appreciate it!

Thank you very much for explanation :). I'll test 2) and 3).
I hope I'm not bugging you to much. I try out various things and then cross-reference it with other sources to get wider picture.

Hi Mike,

Great book! I'm half way through Chapter 5 at the moment, and although I've used Linux for some time now I'm finding I understand a few things a lot better since picking up your book (selinux in particular).

One thing that I constantly find myself doing is going back chapters to see what packages I installed which are in a way prerequisits for other chapters. This is mainly due to me working across two different computers but this also would apply to people who are in a similar situation to me who have a solid fundamental grasp of RHEL and might skip a chapter here or there.

For example: 1 thing that I was working on last night was revising the labs at the end of chapter 4 at home. I booted up the KVM image i've been working on and decided to go through the lab once more. The first issue I came across was semanage, because I hadn't gone through all the exercises on chapter 4 on my VM at home I hadn't gone through all the exercises in this chapter.

It was easy enough to do a "yum provides */semanage" which gave me the package which contains the semanage binary. I decided to look into this further since I didn't recall having to install the policycoreutils-python-2.0.83-19.21.el6_2.x86_64 manually on my VM at work. So after going through the chapter again I realised the reason I didn't have to do that was because I had installed policycoreutils-gui which policycoreutils-python-2.0.83-19.21.el6_2.x86_64 is one of its dependancies. I have come across similar senarios in the past few days.

Other than that I'm really enjoying the book and will hopefully be sitting for my RHCSA exam in the next two week and then looking towards sitting the RHCE.

Cheers!

Dear elfinlied,

I appreciate your kind words, and how you're sharing the experiences you're having with the book. I like your approach, as it in some ways simulate what happens when you take over from another admin. And Red Hat takes pains to focus on such situations in their exam prep courses.

Regarding The Book Comnion CD
 

Dear Mike,

I have bought the book recently and going through this. The problem is that the cd contains only sample test questions; while the book says it should have

--> Complete lab-based exam preparation, featuring:
. Two Full RHCSA practice exams
. Two full RHCE practice exams
. Lab-based chapter skill tests
. In-depth answer explanation for all labs

--> RHCSA and RHCE Glossary

http://www.flickr.com/photos/1194777...n/photostream/

If I am missing something, is it possible to post in the book website or similar places ?

Thanks

Dear Somiam,

From the screenshot you've posted, it appears that you're running the CD in Microsoft Windows. As this is a book based on Red Hat Enterprise Linux 6, I did not test the CD in any Microsoft operating system. Please use Red Hat Enterprise Linux 6 for this book. (Rebuild distributions such as CentOS 6 and Scientific Linux 6 are acceptable substitutes.)

From the screenshot, it looks like you're in the /tata/Exams subdirectory. Go up a level. You should find other subdirectories there.

edit: I should rephrase slightly -- as I haven't tested the CD in Microsoft Windows, I cannot (and will not) suggest what you might see on the CD using that operating system. I'm sorry to be so rigorous about this, but the use of Microsoft Windows is suggestive of a reader who doesn't intend to use other Linux tools covered in the book.

Dear Mike,

Thanks a lot for answering my post.
I can understand your feelings. After writing a rigorous book on an os and now facing queries based on findings in other os is really painful to you.

Sorry, I don't mean to start any debate. Only my centos vm has no external connection and I found a very handy win 7 snipping tool to make the screenshot.

Believe me, there is no other sub directory up in the order. The only other subdir is eula for Tata McGrahill. I have checked it in linux system also and there is no other dir.

Screenshots...
http://www.flickr.com/photos/1194777...in/photostream
http://www.flickr.com/photos/1194777...in/photostream
http://www.flickr.com/photos/1194777...in/photostream
http://www.flickr.com/photos/1194777...in/photostream

Thanks again for your reply..

Dear somiam,

Thank you for showing me what you see in Linux. As I understand it, the people who produce books for Tata are different from the people who produced the main book for McGraw-Hill in the US. As I have no contacts at Tata, it may be some time before I get an answer. I do not know if Tata has any sort of technical support. If they do, you may get a faster response that way.

FYI, the attachment shows what I see from the CD, mounted on the /media directory. Click on it for a magnified view. I've included what you should see in the subdirectories for Chapters 1, 2, and 3, as well as several other subdirectories. Let me know if you need a view of the other subdirectories.

Thanks,
Mike

Thanks a lot for your response....

I contacted TMH publisher. But they are of no help.

After rigorous serch fro 3-4 days, I found the cd content in some forum, which mathes exctly the cd content given by you.....

Thanks again...