LDAP System Administration: Putting Directories to Work

LDAP System Administration: Putting Directories to Work

by Gerald Carter
LDAP System Administration: Putting Directories to Work

LDAP System Administration: Putting Directories to Work

by Gerald Carter

eBook

$23.99  $31.99 Save 25% Current price is $23.99, Original price is $31.99. You Save 25%.

Available on Compatible NOOK devices, the free NOOK App and in My Digital Library.
WANT A NOOK?  Explore Now

Related collections and offers


Overview

Be more productive and make your life easier. That's what LDAP System Administration is all about.System administrators often spend a great deal of time managing configuration information located on many different machines: usernames, passwords, printer configurations, email client configurations, and network filesystem configurations, to name a few. LDAPv3 provides tools for centralizing all of the configuration information and placing it under your control. Rather than maintaining several administrative databases (NIS, Active Directory, Samba, and NFS configuration files), you can make changes in only one place and have all your systems immediately "see" the updated information.Practically platform independent, this book uses the widely available, open source OpenLDAP 2 directory server as a premise for examples, showing you how to use it to help you manage your configuration information effectively and securely. OpenLDAP 2 ships with most Linux® distributions and Mac OS® X, and can be easily downloaded for most Unix-based systems. After introducing the workings of a directory service and the LDAP protocol, all aspects of building and installing OpenLDAP, plus key ancillary packages like SASL and OpenSSL, this book discusses:

  • Configuration and access control
  • Distributed directories; replication and referral
  • Using OpenLDAP to replace NIS
  • Using OpenLDAP to manage email configurations
  • Using LDAP for abstraction with FTP and HTTP servers, Samba, and Radius
  • Interoperating with different LDAP servers, including Active Directory
  • Programming using Net::LDAP
If you want to be a master of your domain, LDAP System Administration will help you get up and running quickly regardless of which LDAP version you use. After reading this book, even with no previous LDAP experience, you'll be able to integrate a directory server into essential network services such as mail, DNS, HTTP, and SMB/CIFS.

Product Details

ISBN-13: 9780596551919
Publisher: O'Reilly Media, Incorporated
Publication date: 03/20/2003
Sold by: Barnes & Noble
Format: eBook
Pages: 312
File size: 3 MB

About the Author

Gerald (Jerry) Carter received his Masters degree in Computer Science from Auburn University, where he continues to pursue his PhD. He has been a member of the Samba development Team since 1998 and his involvement with Unix systems and network administration of UNIX began in 1995. Jerry currently works for HP, working on embedded printing appliances. Having published articles with various web-based magazines, he teaches instructional courses as a consultant for several companies and conferences.

Table of Contents

Prefaceix
Part I.LDAP Basics
1."Now where did I put that...?", or "What is a directory?"3
The Lightweight Directory Access Protocol4
What Is LDAP?5
LDAP Models9
2.LDAPv3 Overview11
LDIF11
What Is an Attribute?15
What Is the dc Attribute?21
Schema References23
Authentication23
Distributed Directories27
Continuing Standardization29
3.OpenLDAP31
Obtaining the OpenLDAP Distribution32
Software Requirements33
Compiling OpenLDAP 236
OpenLDAP Clients and Servers37
The slapd.conf Configuration File38
Access Control Lists (ACLs)55
4.OpenLDAP: Building a Company White Pages59
A Starting Point59
Defining the Schema60
Updating slapd.conf64
Starting slapd65
Adding the Initial Directory Entries66
Graphical Editors77
5.Replication, Referrals, Searching, and SASL Explained79
More Than One Copy Is "a Good Thing"79
Distributing the Directory87
Advanced Searching Options90
Determining a Server's Capabilities93
Creating Custom Schema Files for slapd95
SASL and OpenLDAP97
Part II.Application Integration
6.Replacing NIS101
More About NIS102
Schemas for Information Services104
Information Migration106
The pam_ldap Module108
The nss_ldap Module112
OpenSSH, PAM, and NSS114
Authorization Through PAM115
Netgroups117
Security119
Automount Maps121
PADL's NIS/LDAP Gateway123
7.Email and LDAP126
Representing Users126
Email Clients and LDAP128
Mail Transfer Agents (MTAs)136
8.Standard Unix Services and LDAP157
The Directory Namespace157
An FTP/HTTP Combination158
User Authentication with Samba165
FreeRadius172
Resolving Hosts181
Central Printer Management184
9.LDAP Interoperability191
Interoperability or Integration?192
Directory Gateways193
Cross-Platform Authentication Services193
Distributed, Multivendor Directories204
Metadirectories209
Push/Pull Agents for Directory Synchronization213
10.Net::LDAP and Perl216
The Net::LDAP Module216
Connecting, Binding, and Searching217
Working with Net::LDAP::LDIF222
Updating the Directory223
Advanced Net::LDAP Scripting235
Part III.Appendixes
A.PAM and NSS249
B.OpenLDAP Command-Line Tools255
C.Common Attributes and Objects261
D.LDAP RFCs, Internet-Drafts, and Mailing Lists269
E.slapd.conf ACLs273
Index277
From the B&N Reads Blog

Customer Reviews