These classnotes are depreciated. As of 2005, I no longer teach the classes. Notes will remain online for legacy purposes

LDAP01

Classnotes | RecentChanges | Preferences

Showing revision 15
Instructor: Sam Hart (hart@physics.arizona.edu)

The general homepage for this course is http://www.geekcomix.com/classnotes/


This course provides students with focused, hands-on training for deploying a Lightweight Directory Access Protocol (LDAP) directory server in the GNU/Linux operating system environment. The course teaches students how to set up, install, structure, and configure naming services and authentication using OpenLDAP, as well as integration with other existing technology (SAMBA, Apache, Active Directory). Students are assumed to have a basic understanding of Linux or UNIX environments as well as fundamental client/server concepts.

These classnotes are organized by topic. More often than not, these topics will also coincide with particular days in the class. The topics will be presented in the following order:

Part I : Introduction

/Overview of Necessary UNIX skills
PROJECT : /Familiarize yourself with Debian
/Introduction to LDAP
/History
/LDAPv3 Overview
/Introduction to OpenLDAP
/Obtaining and Installing
PROJECT : /Install OpenLDAP under Debian
LDAP Data Storage
/LDIF Basics
/LDIF Attributes
/LDIF Schema
PROJECT : /Create a Simple LDIF
LDAP Configuration
Basic configuration
/OpenLDAP Configuration Files
/OpenLDAP Control Commands
/Brute force Directory Commands
PROJECT : /Basic OpenLDAP Setup
Intermediate OpenLDAP Configuration & Control
/Access Control
/Directory Access
PROJECT : /Define Access and Verify
Introduction to Graphical Editors
Advanced OpenLDAP Configuration
/Replication
/slurpd configuration
/Referrals?
/Searching and Modifying
PROJECT : /Modify an entry
/Security Settings

Part II : Application Integration

Replacing NIS (tentative, NIS may not be primary focus)
PAM integration
SSH & SSL integration
Misc. Security
Email & LDAP
Integration with MTAs
Integration with MUAs
Standard Unix Services
Directory Namespace
FTP integration
Apache integration
SAMBA integration
DNS integration (possibly replacement, tentative)
Printer management (tentative)
FreeRadius?

Part III : Interoperability

Cross-platform Authentication
UNIX and Windows Authentication (possibly even Mac OS, if desired)
Meta directories
Push/Pull? Agents
Integration with Active Directory
Extension with Perl
Net::LDAP


Classnotes | RecentChanges | Preferences
This page is read-only | View other revisions | View current revision
Edited September 24, 2003 6:01 pm (diff)
Search:
(C) Copyright 2003 Samuel Hart
Creative Commons License
This work is licensed under a Creative Commons License.