What is LDAP?
What is LDAP?
LDAP means leightweight directory access protocol. In other words is is a easy method to access a "directory". And a directory are hirarchical structured data like the data in a DNS server. There are some LDAP server products out there. Netscape directory server, Novell's directory server and Microsoft Active Directory are some flavours. We use OpenLDAP, a open source LDAP server here. So you should install the "openldap2" packet. As usual you can see with
rpm -qa |grep openldap2
if you have the rpm installed and with
rpm -ql openlda2
what files are installed. Activate the init-scripts so that the ldap server can start at boot time. You can check if it is running with
ps -ef |grep slapd
since the server process is called "slapd"
So what do we use it for? We want to have central administration. That means, we want to have a central repository for our users. We don't want to distribute /etc/passwd and /etc/group files to all our machines. We will use LDAP as a central repository.
Created by admin. Last Modification: Friday 18 of November, 2005 23:58:06 UTC by admin.
Category: UNIX
-
wiki page:
- How to use Microsoft Active Directory with postfix
- inserting the first object in your ldap directory
- Installing the mailsystem packages
- Integrating LDAP in your unix system
- Introduction
- Kerberizing kadmin
- Kerberizing sshd
- Kerberos setup
- LDAP
- LDAP schema files
- logging
- Motivation
- nss_ldap security
- OpenLDAP config files
- Other documentation
- performing a first ldap query
- PerfParse
- populating the directory
- Postfix and cyrus imapd and kerberos and LDAP
- Setting up a kerberos client machine
- Setting up your Kerberos servers
- SIngle sign on (SSO) first try
- SSO and Central Administration with Kerberos and LDAP
- Start the kerberos servers
- The configuration files
- The name service switch
- Tweak pam
- Understanding Kerberos
- Understanding Kerberos pt. 2
- Webserver Stress Test Tools
- What is LDAP?
- What the heck is pam?
- What we need
- What we want
- Audience
- Authenticating
- Bash script with timeout function
- Check Processes
- Check your installation
- Choosing a Realm
- configure your mail client
- Configuring and understanding pam
- configuring cyrus imapd
- configuring postfix
- Connect to kadmind and have a look into the database
- Creating the kerberos database
- Edit the Kerberos Admin Server ACL config
- Edit the kerberos client config file
- Edit the kerberos server config file
- Excursus to principals
- exploring schemas
- Fight Image Spam
- Fight Spam best practice
- adding a group
- Adding principals and authenticating
- Another principal
- nss with Solaris 10
- SerialConsole






