LDAP System Administration - Helion

ebook

Autor: Gerald Carter
ISBN: 978-05-965-5191-9
stron: 312, Format: ebook
Data wydania: 2003-03-20
Księgarnia: Helion

Cena książki: 118,15 zł (poprzednio: 137,38 zł)
Oszczędzasz: 14% (-19,23 zł)

Osoby, które kupiły tę książkę, wybierały także »

Tagi: Sieci komputerowe

Be more productive and make your life easier. That's what LDAP System Administration is all about.System administrators often spend a great deal of time managing configuration information located on many different machines: usernames, passwords, printer configurations, email client configurations, and network filesystem configurations, to name a few. LDAPv3 provides tools for centralizing all of the configuration information and placing it under your control. Rather than maintaining several administrative databases (NIS, Active Directory, Samba, and NFS configuration files), you can make changes in only one place and have all your systems immediately "see" the updated information.Practically platform independent, this book uses the widely available, open source OpenLDAP 2 directory server as a premise for examples, showing you how to use it to help you manage your configuration information effectively and securely. OpenLDAP 2 ships with most Linux® distributions and Mac OS® X, and can be easily downloaded for most Unix-based systems. After introducing the workings of a directory service and the LDAP protocol, all aspects of building and installing OpenLDAP, plus key ancillary packages like SASL and OpenSSL, this book discusses:

Configuration and access control
Distributed directories; replication and referral
Using OpenLDAP to replace NIS
Using OpenLDAP to manage email configurations
Using LDAP for abstraction with FTP and HTTP servers, Samba, and Radius
Interoperating with different LDAP servers, including Active Directory
Programming using Net::LDAP

If you want to be a master of your domain, LDAP System Administration will help you get up and running quickly regardless of which LDAP version you use. After reading this book, even with no previous LDAP experience, you'll be able to integrate a directory server into essential network services such as mail, DNS, HTTP, and SMB/CIFS.

Osoby które kupowały "LDAP System Administration", wybierały także:

MPLS in the SDN Era. Interoperable Scenarios to Make Networks Scale to New Services 268,48 zł, (220,15 zł -18%)
Juniper SRX Series. A Comprehensive Guide to Security Services on the SRX Series 299,00 zł, (254,15 zł -15%)
Wireless Hacks. Tips & Tools for Building, Extending, and Securing Your Network. 2nd Edition 94,98 zł, (80,73 zł -15%)
Juniper QFX10000 Series. A Comprehensive Guide to Building Next-Generation Data Centers 226,34 zł, (194,65 zł -14%)
SDN: Software Defined Networks. An Authoritative Review of Network Programmability Technologies 226,34 zł, (194,65 zł -14%)

Spis treści

LDAP System Administration eBook -- spis treści

LDAP System Administration
- SPECIAL OFFER: Upgrade this ebook with OReilly
- A Note Regarding Supplemental Files
- Preface
  - How This Book Is Organized
    - Part I : LDAP Basics
    - Part II : Application Integration
    - Part III: Appendixes
  - Conventions Used in This Book
  - Comments and Questions
  - Acknowledgments
- I. LDAP Basics
  - 1. "Now where did I put that...?", or "What is a directory?"
    - 1.1. The Lightweight Directory Access Protocol
    - 1.2. What Is LDAP?
      - 1.2.1. Lightweight
      - 1.2.2. Directory
      - 1.2.3. Access Protocol
    - 1.3. LDAP Models
  - 2. LDAPv3 Overview
    - 2.1. LDIF
      - 2.1.1. Distinguished Names and Relative Distinguished Names
      - 2.1.2. Back to Our Regularly Scheduled Program . . .
    - 2.2. What Is an Attribute?
      - 2.2.1. Attribute Syntax
      - 2.2.2. What Does the Value of the objectClass Attribute Mean?
    - 2.3. What Is the dc Attribute?
      - 2.3.1. Where Is dc=org?
    - 2.4. Schema References
    - 2.5. Authentication
      - 2.5.1. Anonymous Authentication
      - 2.5.2. Simple Authentication
      - 2.5.3. Simple Authentication Over SSL/TLS
      - 2.5.4. Simple Authentication and Security Layer (SASL)
    - 2.6. Distributed Directories
    - 2.7. Continuing Standardization
  - 3. OpenLDAP
    - 3.1. Obtaining the OpenLDAP Distribution
    - 3.2. Software Requirements
      - 3.2.1. Threads
      - 3.2.2. SSL/TLS Libraries
      - 3.2.3. Database Backend Modules
      - 3.2.4. SASL Libraries
    - 3.3. Compiling OpenLDAP 2
    - 3.4. OpenLDAP Clients and Servers
    - 3.5. The slapd.conf Configuration File
      - 3.5.1. Schema Files
      - 3.5.2. Logging
      - 3.5.3. SASL Options
      - 3.5.4. SSL/TLS Options
        
        3.5.4.1. Generating the servers certificate
      - 3.5.5. More Security-Related Parameters
      - 3.5.6. Serving Up Data
        
        3.5.6.1. bdb backend-specific parameters
    - 3.6. Access Control Lists (ACLs)
  - 4. OpenLDAP: Building a Company White Pages
    - 4.1. A Starting Point
    - 4.2. Defining the Schema
    - 4.3. Updating slapd.conf
    - 4.4. Starting slapd
    - 4.5. Adding the Initial Directory Entries
      - 4.5.1. Verifying the Directory's Contents
      - 4.5.2. Updating What Is Already There
    - 4.6. Graphical Editors
  - 5. Replication, Referrals, Searching, and SASL Explained
    - 5.1. More Than One Copy Is "a Good Thing"
      - 5.1.1. Building slurpd
      - 5.1.2. Replication in a Nutshell
      - 5.1.3. Configuring the Master Server
      - 5.1.4. Configuring the Replica Server
      - 5.1.5. slurpd's replogfile
    - 5.2. Distributing the Directory
    - 5.3. Advanced Searching Options
      - 5.3.1. Following Referrals with ldapsearch
      - 5.3.2. Limiting Your Searches
    - 5.4. Determining a Server's Capabilities
    - 5.5. Creating Custom Schema Files for slapd
    - 5.6. SASL and OpenLDAP
- II. Application Integration
  - 6. Replacing NIS
    - 6.1. More About NIS
    - 6.2. Schemas for Information Services
    - 6.3. Information Migration
    - 6.4. The pam_ldap Module
      - 6.4.1. Configuring /etc/ldap.conf
    - 6.5. The nss_ldap Module
    - 6.6. OpenSSH, PAM, and NSS
    - 6.7. Authorization Through PAM
      - 6.7.1. One Host and a Group of Users
      - 6.7.2. One User and a Group of Hosts
    - 6.8. Netgroups
    - 6.9. Security
    - 6.10. Automount Maps
    - 6.11. PADL's NIS/LDAP Gateway
  - 7. Email and LDAP
    - 7.1. Representing Users
    - 7.2. Email Clients and LDAP
      - 7.2.1. Mozilla Mail
      - 7.2.2. Pine 4
      - 7.2.3. Eudora
      - 7.2.4. Microsoft Outlook Express
    - 7.3. Mail Transfer Agents (MTAs)
      - 7.3.1. Sendmail
        
        7.3.1.1. Maps
        
        7.3.1.2. Aliases
        
        7.3.1.3. Mail routing using LDAP
      - 7.3.2. Postfix
      - 7.3.3. Exim
  - 8. Standard Unix Services and LDAP
    - 8.1. The Directory Namespace
    - 8.2. An FTP/HTTP Combination
      - 8.2.1. ProFTPD
      - 8.2.2. Apache
    - 8.3. User Authentication with Samba
      - 8.3.1. Configuring Samba
        
        8.3.1.1. Configuring OpenLDAP
      - 8.3.2. Adding and Using a sambaAccount
    - 8.4. FreeRadius
      - 8.4.1. FreeRadius and OpenLDAP
    - 8.5. Resolving Hosts
    - 8.6. Central Printer Management
  - 9. LDAP Interoperability
    - 9.1. Interoperability or Integration?
    - 9.2. Directory Gateways
    - 9.3. Cross-Platform Authentication Services
      - 9.3.1. A Short Discussion About Kerberos
    - 9.4. Distributed, Multivendor Directories
    - 9.5. Metadirectories
    - 9.6. Push/Pull Agents for Directory Synchronization
      - 9.6.1. The Directory Services Markup Language
  - 10. Net::LDAP and Perl
    - 10.1. The Net::LDAP Module
    - 10.2. Connecting, Binding, and Searching
    - 10.3. Working with Net::LDAP::LDIF
    - 10.4. Updating the Directory
      - 10.4.1. Adding New Entries
      - 10.4.2. Deleting Entries
      - 10.4.3. Modifying Entries
        
        10.4.3.1. Net::LDAP::Entry
        
        10.4.3.2. Pushing an updated entry back to the server
        
        10.4.3.3. Modifying directory entries
    - 10.5. Advanced Net::LDAP Scripting
      - 10.5.1. References and Referrals
      - 10.5.2. Scripting Authentication with SASL
      - 10.5.3. Extensions and Controls
        
        10.5.3.1. Extensions
        
        10.5.3.2. Controls
- III. Appendixes
  - A. PAM and NSS
    - A.1. Pluggable Authentication Modules
      - A.1.1. Configuring PAM
    - A.2. Name Service Switch (NSS)
  - B. OpenLDAP Command-Line Tools
    - B.1. Debugging Options
    - B.2. Slap Tools
      - B.2.1. slapadd(8c)
      - B.2.2. slapcat(8c)
      - B.2.3. slapindex(8c)
      - B.2.4. slappasswd(8c)
    - B.3. LDAP Tools
      - B.3.1. ldapadd(1), ldapmodify(1)
      - B.3.2. ldapcompare(1)
      - B.3.3. ldapdelete(1)
      - B.3.4. ldapmodrdn(1)
      - B.3.5. ldappasswd(1)
      - B.3.6. ldapsearch(1)
  - C. Common Attributes and Objects
    - C.1. Schema Files
    - C.2. Attributes
    - C.3. Object Classes
      - account
      - dcObject
      - dNSZone
      - gidPool
      - inetLocalMailReciptient
      - inetOrgPerson
      - nisMap
      - nisNetgroup
      - nisObject
      - nprintHostPrinter
      - nprintNetworkPrinterInfo
      - nprintPortPrinterInfo
      - organizationalPerson
      - organizationalUnit
      - person
      - posixAccount
      - posixGroup
      - printerAbstract
      - printerIPP
      - printerLPR
      - printerService
      - printerServiceAuxClass
      - radiusprofile
      - referral
      - sambaAccount
      - sendmailMTA
      - sendmailMTAAlias
      - sendmailMTAAliasObject
      - sendmailMTAClass
      - sendmailMTAMap
      - sendmailMTAMapObject
      - shadowAccount
      - uidPool
  - D. LDAP RFCs, Internet-Drafts, and Mailing Lists
    - D.1. Requests for Comments
    - D.2. Mailing Lists
  - E. slapd.conf ACLs
    - E.1. What?
    - E.2. Who?
    - E.3. How Much?
    - E.4. Examples
- Colophon
- SPECIAL OFFER: Upgrade this ebook with OReilly