LDAP System Administration

Gerald Carter
Éditeur
O'Reilly & Associates
ISBN
1-56592-491-6
Parution
mars 2003
Prix (à titre indicatif)
40 €
Nombre de pages
294
Public
Administrateur système, administrateur réseau intranet/internet
Description

Be more productive and make your life easier. That's what LDAP System Administration is all about.

System administrators often spend a great deal of time managing configuration information located on many different machines: usernames, passwords, printer configurations, email client configurations, and network filesystem configurations, to name a few. LDAPv3 provides tools for centralizing all of the configuration information and placing it under your control. Rather than maintaining several administrative databases (NIS, Active Directory, Samba, and NFS configuration files), you can make changes in only one place and have all your systems immediately "see" the updated information.

Practically platform independent, this book uses the widely available, open source OpenLDAP 2 directory server as a premise for examples, showing you how to use it to help you manage your configuration information effectively and securely. OpenLDAP 2 ships with most Linux® distributions and Mac OS® X, and can be easily downloaded for most Unix-based systems. After introducing the workings of a directory service and the LDAP protocol, all aspects of building and installing OpenLDAP, plus key ancillary packages like SASL and OpenSSL, this book discusses:

  • Configuration and access control
  • Distributed directories; replication and referral
  • Using OpenLDAP to replace NIS
  • Using OpenLDAP to manage email configurations
  • Using LDAP for abstraction with FTP and HTTP servers, Samba, and Radius
  • Interoperating with different LDAP servers, including Active Directory
  • Programming using Net::LDAP

If you want to be a master of your domain, LDAP System Administration will help you get up and running quickly regardless of which LDAP version you use. After reading this book, even with no previous LDAP experience, you'll be able to integrate a directory server into essential network services such as mail, DNS, HTTP, and SMB/CIFS.

Extrait
Chapitre 7 "Email and LDAP" [PDF : 1.2Mo]
 Sujets (ou table des matières)

    Part I. LDAP Basics

  • 1. "Now where did I put that…?", or "What is a directory?"
    The Lightweight Directory Access Protocol
    What Is LDAP?
    LDAP Models
  • 2. LDAPv3 Overview
    LDIF
    What Is an Attribute?
    What Is the dc Attribute?
    Schema References
    Authentication
    Distributed Directories
    Continuing Standardization
  • 3. OpenLDAP
    Obtaining the OpenLDAP Distribution
    Software Requirements
    Compiling OpenLDAP 2
    OpenLDAP Clients and Servers
    The slapd.conf Configuration File
    Access Control Lists (ACLs)
  • 4. OpenLDAP: Building a Company White Pages
    A Starting Point
    Defining the Schema
    Updating slapd.conf
    Starting slapd
    Adding the Initial Directory Entries
    Graphical Editors
  • 5. Replication, Referrals, Searching, and SASL Explained
    More Than One Copy Is "a Good Thing"
    Distributing the Directory
    Advanced Searching Options
    Determining a Server's Capabilities
    Creating Custom Schema Files for slapd
    SASL and OpenLDAP

    Part II. Application Integration

  • 6. Replacing NIS
    More About NIS
    Schemas for Information Services
    Information Migration
    The pam_ldap Module
    The nss_ldap Module
    OpenSSH, PAM, and NSS
    Authorization Through PAM
    Netgroups
    Security
    Automount Maps
    PADL's NIS/LDAP Gateway
  • 7. Email and LDAP
    Representing Users
    Email Clients and LDAP
    Mail Transfer Agents (MTAs)
  • 8. Standard Unix Services and LDAP
    The Directory Namespace
    An FTP/HTTP Combination
    User Authentication with Samba
    FreeRadius
    Resolving Hosts
    Central Printer Management
  • 9. LDAP Interoperability
    Interoperability or Integration?
    Directory Gateways
    Cross-Platform Authentication Services
    Distributed, Multivendor Directories
    Metadirectories
    Push/Pull Agents for Directory Synchronization
  • 10. Net::LDAP and Perl
    The Net::LDAP Module
    Connecting, Binding, and Searching
    Working with Net::LDAP::LDIF
    Updating the Directory
    Advanced Net::LDAP Scripting

    Part III. Appendixes

  • A. PAM and NSS
  • B. OpenLDAP Command-Line Tools
  • C. Common Attributes and Objects
  • D. LDAP RFCs, Internet-Drafts, and Mailing Lists
  • E. slapd.conf ACLs

http://librairie.diablotin.com
Nous envoyer un courrier électronique