LinuxCBT feat. OpenLDAP Edition focuses on the common Linux | Unix directory services application: OpenLDAP. It is a module of LinuxCBT Directory Services Edition.
OpenLDAP provides a lightweight, central information directory service for countless applications, including general user authentication services. This results in reduced administrative overhead. OpenLDAP also supports replication and encryption, promoting high-availability and security. Furthermore, knowledge of OpenLDAP prepares you to work comfortably with Open Source and commercial LDAP variants.
Let LinuxCBT feat. OpenLDAP Edition cost-effectively teach you Linux | Unix directory skills.
Recommended Prerequisites for:
- Any LinuxCBT Operating System Course (Classic/EL-4|5/SUSE/Debian Editions)
- Open mind & determination to master Linux and related open-source applications
- Access to a Linux or Solaris system to follow the exercises
LinuxCBT feat. OpenLDAP Edition
- Introduction - Features
- Discuss LDAP history
- Enumerate key features
- Discuss typical LDAP applications
- Compare and contrast LDAP namespace to DNS namespace
- Discuss key offline|online administrative tools
- Identify key systems
to be used
- LDAP Concepts
- Explore target Directory Information Tree (DIT)
- Discuss Distinguished Names (DNs)
- Directory Information Tree (DIT)
- Discuss Object Classes
- Discuss Attributes
- Discuss the importance of Schemas
- Explain how LDAP interacts with PAM and NSS to authenticate
users
- Master Server Configuration
- Explore PAM and NSS configuration
- Install and explore OpenLDAP packages
- Configure Master server
to serve the default LDAP namespace
- Initiate LDAP server
- Define Directory Information Tree (DIT)
- Search the default DIT using 'ldapsearch'
- Update /etc/hosts files with participating LDAP servers
- Use LDAP Browser GUI to explore LDAP DIT
- Explain LDIF entries
- Create the top-level LDAP DIT container object using 'ldapadd' with LDIF file
- Create second-level Organizational Units (OUs) for functional groups
- Create users within each second-level OU
- Verify results
- Attempt to create duplicate entries
- Configure Replication
- Discuss features and benefits
- Explore network topology
- Install required packages on LDAP replication partner
(replica)
- Enumerate and execute replication configuration steps
- Evaluate results
on master and replica LDAP servers
- LDAP on Solaris Configuration
- Discuss features and benefits
- Download and install LDAP
and required packages
- Update /etc/hosts configuration on replica
- Configure server as LDAP replica
- Verify results
- LDAP Add
- Discuss features and benefits
- Explain 'ldapadd' usage
- Add users to remaining OUs
- Verify results
- Use 'ldapadd' with: STDIN and LDIF file
- Use 'ldapadd' from replica
- Evaluate results
using 'ldapsearch' and LDAP Browser GUI
- LDAP Delete
- Discuss features and benefits
- Explain 'ldapdelete' usage
- Delete specific LDAP objects
remotely
- Evaluate results
- Delete multiple LDAP objects using STDIN and LDIF
- Evaluate results
- Use 'ldapsearch' to derive applicable LDIF statements
- Attempt to delete non-existing and existing items
- Evaluate results using: 'ldapsearch' and LDAP Browser GUI
- LDAP Modify
- Discuss features and benefits
- Confirm current state of DIT on master and replicas using 'ldapsearch'
- Rebuild the DIT using 'ldapmodify'
- Confirm results with LDAP Browser GUI
- Modify attributes using 'ldapmodify' with LDIF
- Delete objects using 'ldapmodify'
- Evaluate results
- LDAP Search
- Discuss features
and benefits
- Discuss supported boolean operators
- Discuss filter operators
- Use wildcards in searches
- Peform string searches
- Search distinct OUs
for all object types
- Search the DIT for OUs
- Search the DIT for specific attributes
- Search the DIT for specific user objects
- Perform boolean searches
- Evaluate results
- Logging
- Discuss features and applications
- Explore master server logging and syslog configuration
- Discuss debugging levels
- Start LDAP server in desired debug level
- Evaluate results
- Vary logging verbosity
- Configure logging on replica server
- Evaluate results
- LDIF
- Discuss features and benfits
- Use 'ldapsearch' to explore LDIF entries
- Discuss LDIF structure
- Discuss key object types
- Create a new user object using LDIF
- Delete using LDIF
- Modify using LDIF
- Evaluate results
- LDAP Schemas
- Discuss features and benefits
- Explain applicability
- Examine 'slapd.conf'
- Explore default schema files
on master and replica servers
- Correlate schemas to LDIF entries
- Migrate to LDAP Authentication
- Discuss features and benefits
- Migrate primary server to LDAP authentication
- Confirm configuration
- Migrate replica servers to LDAP authentication
- Evaluate results
- Migrate local users from master and replica servers to LDAP DIT
- Confirm results using 'ldapsearch'
- Confirm authentication of LDAP users on master and replica servers
- Migrate other useful Linux|Unix tables
- Syncrepl Replication
- Discuss features and benefits
- Migrate from 'slurpd' to 'syncrepl'
- Evaluate results
- LDAP Security
- Discuss features and benefits
- Explore Access Control Lists (ACLs)
- Configure SSL/TLS encryption
- Evaluate results
- top
|
