LinuxCBT feat. OpenLDAP Edition focuses on the common Linux | Unix directory services application: OpenLDAP. It is a module of LinuxCBT Directory Services Edition.

OpenLDAP provides a lightweight, central information directory service for countless applications, including general user authentication services. This results in reduced administrative overhead. OpenLDAP also supports replication and encryption, promoting high-availability and security. Furthermore, knowledge of OpenLDAP prepares you to work comfortably with Open Source and commercial LDAP variants.

Let LinuxCBT feat. OpenLDAP Edition cost-effectively teach you Linux | Unix directory skills.

Recommended Prerequisites for:

• Any LinuxCBT Operating System Course (Classic/EL-4|5/SUSE/Debian Editions)
  • Open mind & determination to master Linux and related open-source applications
  • Access to a Linux or Solaris system to follow the exercises

LinuxCBT feat. OpenLDAP Edition

• Introduction - Features
  • Discuss LDAP history
  • Enumerate key features
  • Discuss typical LDAP applications
  • Compare and contrast LDAP namespace to DNS namespace
  • Discuss key offline|online administrative tools
  • Identify key systems to be used
• LDAP Concepts
  • Explore target Directory Information Tree (DIT)
  • Discuss Distinguished Names (DNs)
  • Directory Information Tree (DIT)
  • Discuss Object Classes
  • Discuss Attributes
  • Discuss the importance of Schemas
  • Explain how LDAP interacts with PAM and NSS to authenticate users
• Master Server Configuration
  • Explore PAM and NSS configuration
  • Install and explore OpenLDAP packages
  • Configure Master server to serve the default LDAP namespace
  • Initiate LDAP server
• Define Directory Information Tree (DIT)
  • Search the default DIT using 'ldapsearch'
  • Update /etc/hosts files with participating LDAP servers
  • Use LDAP Browser GUI to explore LDAP DIT
  • Explain LDIF entries
  • Create the top-level LDAP DIT container object using 'ldapadd' with LDIF file
  • Create second-level Organizational Units (OUs) for functional groups
  • Create users within each second-level OU
  • Verify results
  • Attempt to create duplicate entries
• Configure Replication
  • Discuss features and benefits
  • Explore network topology
  • Install required packages on LDAP replication partner (replica)
  • Enumerate and execute replication configuration steps
  • Evaluate results on master and replica LDAP servers
• LDAP on Solaris Configuration
  • Discuss features and benefits
  • Download and install LDAP and required packages
  • Update /etc/hosts configuration on replica
  • Configure server as LDAP replica
  • Verify results
• LDAP Add
  • Discuss features and benefits
  • Explain 'ldapadd' usage
  • Add users to remaining OUs
  • Verify results
  • Use 'ldapadd' with: STDIN and LDIF file
  • Use 'ldapadd' from replica
  • Evaluate results using 'ldapsearch' and LDAP Browser GUI
• LDAP Delete
  • Discuss features and benefits
  • Explain 'ldapdelete' usage
  • Delete specific LDAP objects remotely
  • Evaluate results
  • Delete multiple LDAP objects using STDIN and LDIF
  • Evaluate results
  • Use 'ldapsearch' to derive applicable LDIF statements
  • Attempt to delete non-existing and existing items
  • Evaluate results using: 'ldapsearch' and LDAP Browser GUI
• LDAP Modify
  • Discuss features and benefits
  • Confirm current state of DIT on master and replicas using 'ldapsearch'
  • Rebuild the DIT using 'ldapmodify'
  • Confirm results with LDAP Browser GUI
  • Modify attributes using 'ldapmodify' with LDIF
  • Delete objects using 'ldapmodify'
  • Evaluate results
• LDAP Search
• Discuss features and benefits
• Discuss supported boolean operators
• Discuss filter operators
• Use wildcards in searches
• Peform string searches
• Search distinct OUs for all object types
• Search the DIT for OUs
• Search the DIT for specific attributes
• Search the DIT for specific user objects
• Perform boolean searches
• Evaluate results
• Logging
  • Discuss features and applications
  • Explore master server logging and syslog configuration
  • Discuss debugging levels
  • Start LDAP server in desired debug level
  • Evaluate results
  • Vary logging verbosity
  • Configure logging on replica server
  • Evaluate results
• LDIF
  • Discuss features and benfits
  • Use 'ldapsearch' to explore LDIF entries
  • Discuss LDIF structure
  • Discuss key object types
  • Create a new user object using LDIF
  • Delete using LDIF
  • Modify using LDIF
  • Evaluate results
• LDAP Schemas
  • Discuss features and benefits
  • Explain applicability
  • Examine 'slapd.conf'
  • Explore default schema files on master and replica servers
  • Correlate schemas to LDIF entries
• Migrate to LDAP Authentication
  • Discuss features and benefits
  • Migrate primary server to LDAP authentication
  • Confirm configuration
  • Migrate replica servers to LDAP authentication
  • Evaluate results
  • Migrate local users from master and replica servers to LDAP DIT
  • Confirm results using 'ldapsearch'
  • Confirm authentication of LDAP users on master and replica servers
  • Migrate other useful Linux|Unix tables
• Syncrepl Replication
  • Discuss features and benefits
  • Migrate from 'slurpd' to 'syncrepl'
  • Evaluate results
• LDAP Security
  • Discuss features and benefits
  • Explore Access Control Lists (ACLs)
  • Configure SSL/TLS encryption
  • Evaluate results
• top