book

LDAP System Administration

by Gerald Carter

March 2003

Intermediate to advanced

308 pages

9h 36m

English

O'Reilly Media, Inc.

Read now

Unlock full access

2.1.1. Distinguished Names and Relative Distinguished Names2.1.2. Back to Our Regularly Scheduled Program . . .
2.2.1. Attribute Syntax2.2.2. What Does the Value of the objectClass Attribute Mean?
2.3.1. Where Is dc=org?
2.5.1. Anonymous Authentication2.5.2. Simple Authentication2.5.3. Simple Authentication Over SSL/TLS2.5.4. Simple Authentication and Security Layer (SASL)
3.2.1. Threads3.2.2. SSL/TLS Libraries3.2.3. Database Backend Modules3.2.4. SASL Libraries
3.5.1. Schema Files3.5.2. Logging3.5.3. SASL Options3.5.4. SSL/TLS Options3.5.4.1. Generating the server’s certificate3.5.5. More Security-Related Parameters3.5.6. Serving Up Data3.5.6.1. bdb backend-specific parameters
4.5.1. Verifying the Directory’s Contents4.5.2. Updating What Is Already There
5.1.1. Building slurpd5.1.2. Replication in a Nutshell5.1.3. Configuring the Master Server5.1.4. Configuring the Replica Server5.1.5. slurpd’s replogfile
5.3.1. Following Referrals with ldapsearch5.3.2. Limiting Your Searches
6.4.1. Configuring /etc/ldap.conf
6.7.1. One Host and a Group of Users6.7.2. One User and a Group of Hosts
7.2.1. Mozilla Mail7.2.2. Pine 47.2.3. Eudora7.2.4. Microsoft Outlook Express
7.3.1. Sendmail7.3.1.1. Maps7.3.1.2. Aliases7.3.1.3. Mail routing using LDAP7.3.2. Postfix7.3.3. Exim
8.2.1. ProFTPD8.2.2. Apache
8.3.1. Configuring Samba8.3.1.1. Configuring OpenLDAP8.3.2. Adding and Using a sambaAccount
8.4.1. FreeRadius and OpenLDAP
9.3.1. A Short Discussion About Kerberos
9.6.1. The Directory Services Markup Language
10.4.1. Adding New Entries10.4.2. Deleting Entries10.4.3. Modifying Entries10.4.3.1. Net::LDAP::Entry10.4.3.2. Pushing an updated entry back to the server10.4.3.3. Modifying directory entries
10.5.1. References and Referrals10.5.2. Scripting Authentication with SASL10.5.3. Extensions and Controls10.5.3.1. Extensions10.5.3.2. Controls
A.1.1. Configuring PAM
B.2.1. slapadd(8c)B.2.2. slapcat(8c)B.2.3. slapindex(8c)B.2.4. slappasswd(8c)
B.3.1. ldapadd(1), ldapmodify(1)B.3.2. ldapcompare(1)B.3.3. ldapdelete(1)B.3.4. ldapmodrdn(1)B.3.5. ldappasswd(1)B.3.6. ldapsearch(1)

Overview

Be more productive and make your life easier. That's what LDAP System Administration is all about.System administrators often spend a great deal of time managing configuration information located on many different machines: usernames, passwords, printer configurations, email client configurations, and network filesystem configurations, to name a few. LDAPv3 provides tools for centralizing all of the configuration information and placing it under your control. Rather than maintaining several administrative databases (NIS, Active Directory, Samba, and NFS configuration files), you can make changes in only one place and have all your systems immediately "see" the updated information.Practically platform independent, this book uses the widely available, open source OpenLDAP 2 directory server as a premise for examples, showing you how to use it to help you manage your configuration information effectively and securely. OpenLDAP 2 ships with most Linux® distributions and Mac OS® X, and can be easily downloaded for most Unix-based systems. After introducing the workings of a directory service and the LDAP protocol, all aspects of building and installing OpenLDAP, plus key ancillary packages like SASL and OpenSSL, this book discusses:

Configuration and access control
Distributed directories; replication and referral
Using OpenLDAP to replace NIS
Using OpenLDAP to manage email configurations
Using LDAP for abstraction with FTP and HTTP servers, Samba, and Radius
Interoperating with different LDAP servers, including Active Directory
Programming using Net::LDAP

If you want to be a master of your domain, LDAP System Administration will help you get up and running quickly regardless of which LDAP version you use. After reading this book, even with no previous LDAP experience, you'll be able to integrate a directory server into essential network services such as mail, DNS, HTTP, and SMB/CIFS.