Linux CBT OpenLDAP Edition

Course Objective

Introduction - Features
Discuss LDAP history
Enumerate key features
Discuss typical LDAP applications
Compare and contrast LDAP namespace to DNS namespace
Discuss key offline|online administrative tools
Identify key systems to be used

LDAP Concepts
Explore target Directory Information Tree (DIT)
Discuss Distinguished Names (DNs)
Directory Information Tree (DIT)
Discuss Object Classes
Discuss Attributes
Discuss the importance of Schemas
Explain how LDAP interacts with PAM and NSS to authenticate users

Master Server Configuration
Explore PAM and NSS configuration
Install and explore OpenLDAP packages
Configure Master server to serve the default LDAP namespace
Initiate LDAP server

Define Directory Information Tree (DIT)
Search the default DIT using 'ldapsearch'
Update /etc/hosts files with participating LDAP servers
Use LDAP Browser GUI to explore LDAP DIT
Explain LDIF entries
Create the top-level LDAP DIT container object using 'ldapadd' with LDIF file
Create second-level Organizational Units (OUs) for functional groups
Create users within each second-level OU
Verify results
Attempt to create duplicate entries

Configure Replication
Discuss features and benefits
Explore network topology
Install required packages on LDAP replication partner (replica)
Enumerate and execute replication configuration steps
Evaluate results on master and replica LDAP servers

LDAP on Solaris Configuration
Discuss features and benefits
Download and install LDAP and required packages
Update /etc/hosts configuration on replica
Configure server as LDAP replica
Verify results

LDAP Add
Discuss features and benefits
Explain 'ldapadd' usage
Add users to remaining OUs
Verify results
Use 'ldapadd' with: STDIN and LDIF file
Use 'ldapadd' from replica
Evaluate results using 'ldapsearch' and LDAP Browser GUI

LDAP Delete
Discuss features and benefits
Explain 'ldapdelete' usage
Delete specific LDAP objects remotely
Evaluate results
Delete multiple LDAP objects using STDIN and LDIF
Evaluate results
Use 'ldapsearch' to derive applicable LDIF statements
Attempt to delete non-existing and existing items
Evaluate results using: 'ldapsearch' and LDAP Browser GUI

LDAP Modify
Discuss features and benefits
Confirm current state of DIT on master and replicas using 'ldapsearch'
Rebuild the DIT using 'ldapmodify'
Confirm results with LDAP Browser GUI
Modify attributes using 'ldapmodify' with LDIF
Delete objects using 'ldapmodify'
Evaluate results

LDAP Search
Discuss features and benefits
Discuss supported boolean operators
Discuss filter operators
Use wildcards in searches
Peform string searches
Search distinct OUs for all object types
Search the DIT for OUs
Search the DIT for specific attributes
Search the DIT for specific user objects
Perform boolean searches
Evaluate results

Logging
Discuss features and applications
Explore master server logging and syslog configuration
Discuss debugging levels
Start LDAP server in desired debug level
Evaluate results
Vary logging verbosity
Configure logging on replica server
Evaluate results

LDIF
Discuss features and benfits
Use 'ldapsearch' to explore LDIF entries
Discuss LDIF structure
Discuss key object types
Create a new user object using LDIF
Delete using LDIF
Modify using LDIF
Evaluate results

LDAP Schemas
Discuss features and benefits
Explain applicability
Examine 'slapd.conf'
Explore default schema files on master and replica servers
Correlate schemas to LDIF entries

Migrate to LDAP Authentication
Discuss features and benefits
Migrate primary server to LDAP authentication
Confirm configuration
Migrate replica servers to LDAP authentication
Evaluate results
Migrate local users from master and replica servers to LDAP DIT
Confirm results using 'ldapsearch'
Confirm authentication of LDAP users on master and replica servers
Migrate other useful Linux|Unix tables

Syncrepl Replication
Discuss features and benefits
Migrate from 'slurpd' to 'syncrepl'
Evaluate results

LDAP Security
Discuss features and benefits
Explore Access Control Lists (ACLs)
Configure SSL/TLS encryption
Evaluate results