ldapv3.pdf 7947KB Apr 17 2013 11:30:42 AM - mirror omadata

More documents

Recommendations

Info

Supported Bind Types Depending on how and LDAP server is configured, and with what libraries it was compiled, it may support various authentication methods. You can query and ldap server for the authentication methods it supports using the following command: $ ldapsearch -H ldaps://localhost/ -x -b "" -s base \ -LLL supportedSASLMechanisms supportedSASLMechanisms: PLAIN supportedSASLMechanisms: LOGIN supportedSASLMechanisms: GSSAPI Plain Text (OpenLDAP 1.x) SASL, passwords. Clients that use PLAIN bind cannot automatically chase referrals Kerberos V via SASL
Page 1 and 2:
LDAP and OpenLDAP (on the Linux Pla
Page 3 and 4:
KLUG The master copy of this docume
Page 5:
Versions For the most part this doc
Page 8 and 9:
What is a directory? A directory is
Page 10 and 11:
¤¥ § ¨ © ¨ ¨ £¡ ¡
Page 12 and 13: Requirements An LDAPv3 compliant di
Page 14 and 15: Gotcha: “requested“ protocol ve
Page 16 and 17: Multi-Valued RDNs While most object
Page 19 and 20: Schema A directory has a schema sim
Page 21 and 22: 1.1.x It is true that the 1.1.x OID
Page 23 and 24: WARNING (Object Class Type) Early O
Page 25 and 26: Attribute Schema OID Name (alias fo
Page 27 and 28: Attribute Syntaxes Data Type OID De
Page 29: The OID is the truth. The names of
Page 32 and 33: Illegal Partitions The law of parti
Page 34: Subordinate Information Subordinate
Page 37 and 38: Operational ACI Attributes If your
Page 39 and 40: subSchema One of the most useful bi
Page 41 and 42: The ManageDsaIT Control OID: 2.16.8
Page 43 and 44: The "alias" object The alias object
Page 45 and 46: Start TLS Extended Operation OID: 1
Page 47: 2.1.x hasSubordinates Only implemen
Page 50 and 51: Supported `Advanced' Features Featu
Page 52 and 53: The Config Files Configuration file
Page 54 and 55: slapd.conf (defaultsearchbase) The
Page 56 and 57: equire The require configuration di
Page 58 and 59: loglevel The loglevel directive con
Page 60 and 61: Checking the SSL Configuration Once
Page 64 and 65: What is SASL? SASL is the Simple Au
Page 66 and 67: SASL Terms user id The string used
Page 68 and 69: SASL Configuration The default SASL
Page 70 and 71: etc/sasldb2 & /etc/sasldb For SASL
Page 72 and 73: sasldblistusers & sasldblistusers2
Page 74 and 75: 2.1.x The Authentication Request DN
Page 76 and 77: r r r r r r >2.1.x sasl-regexp sear
Page 78 and 79: 2.1.x Proxy Authentication
Page 80 and 81: OpenLDAP + SASL + GSSAPI (OpenLDAP
Page 82 and 83: OpenLDAP + SASL + GSSAPI (OpenLDAP
Page 84: Associating LDAP Objects and Kerber
Page 87 and 88: suffixAlias The suffixAlias feature
Page 89 and 90: ack-bdb >2.1.x In the OpenLDAP 2.1.
Page 91 and 92: ack-ldap The back ldap module acts
Page 93 and 94: ack-passwd The back-passwd backend
Page 95 and 96: ack-meta Back-meta is currently onl
Page 97: Slapindex If additional indexes are
Page 100 and 101: Indexing Maintaining the correct in
Page 102 and 103: Journalized Filesystems Use of a jo
Page 104: Concurrency & the thread pool There
Page 107 and 108: Enabling the SQL backend In order t
Page 109 and 110: “rdbms_depend” The exact SQL st
Page 111 and 112: Attribute Mappings ldap_attr_mappin
Page 113 and 114:
dn Mapping CREATE SEQUENCE ldap_ent
Page 115 and 116:
Referral Mapping ldap_referrals lda
Page 117 and 118:
Stored Procedure Examples
Page 120 and 121:
Replication For redundancy and avai
Page 122 and 123:
Configuration of Replication A mast
Page 124 and 125:
Differentiated Replication Slave (o
Page 126 and 127:
What exactly happens.... 1. When sl
Page 128 and 129:
The updatedn The updatedn is the id
Page 130:
Multimaster An experimental option
Page 133 and 134:
Access Levels OpenLDAP support four
Page 135 and 136:
ACL Matching Patterns There are sev
Page 137 and 138:
Group Matching One of the most powe
Page 139 and 140:
Regular Expression Matching The use
Page 141 and 142:
Anonymous Users When an application
Page 143 and 144:
selfwrite The selfwrite access dire
Page 146 and 147:
What is ACI? Access Control Informa
Page 148 and 149:
Disadvantages of ACI Each object co
Page 150 and 151:
OpenLDAPaciMatch The OpenLDAPaci at
Page 152 and 153:
OpenLDAPaci The value of an OpenLDA
Page 154:
OpenLDAPaci: Type & Subject The typ
Page 157 and 158:
RFC2307 The RFC document specifies
Page 159 and 160:
Hierarchy: core.schema top subschem
Page 161 and 162:
Hierarchy: nis.schema top nisObject
Page 163:
Misc. Schema Hierarchies Misc. Sche
Page 166 and 167:
etc/openldap/ldap.conf The defaults
Page 168 and 169:
The LDAP NSS Modules GLIBC systems
Page 170 and 171:
authconfig authconfig is a package
Page 172 and 173:
etc/ldap.conf The file /etc/ldap.co
Page 174 and 175:
Administrative Password Changing In
Page 176:
The shadowLastChange Bug If a user'
Page 179 and 180:
Using the scripts... The file migra
Page 181 and 182:
Extended Migration An extended migr
Page 185:
LDAP URLs Syntax ldap[1]://:/??? Se
Page 188 and 189:
posixGroup Object An entry of users
Page 190 and 191:
ipService Object An entry such of j
Page 192:
ipProtocol Object An entry of pipe
Page 195 and 196:
Contents Of An SRV Record Service.P
Page 197 and 198:
SRV records and bind Very late vers
Page 199:
Non-Conformists pam_ldap The curren
Page 202:
Public SRV Records
Page 205 and 206:
Loading Tip: Normalize DN The LDAP
Page 207 and 208:
Invalid Data If, when trying to loa
Page 209:
Binary Data Some attributes, jpegPh
Page 212 and 213:
LDIF LDAP Directory Information Fil
Page 214 and 215:
ldapsearch ldapsearch [options] [qu
Page 216 and 217:
ldapmodify / ldapadd The ldapmodify
Page 218 and 219:
Binding with the utilities.... If y
Page 220:
slapcat slapcat is the functional o
Page 223 and 224:
gq (Object browser and editor)
Page 225 and 226:
ldapdiff (http://webtomware.rhoen.d
Page 227 and 228:
KDE Directory Administrator (http:/
Page 229 and 230:
Directory Administrator Directory A
Page 231 and 232:
pdb2ldif (http://uslinux.net/script
Page 233 and 234:
ISPMan: Schema Editor Available at
Page 235 and 236:
LDAPUtils (http://fanying.fanying.c
Page 237 and 238:
squid_ldap_auth (http://sourceforge
Page 239 and 240:
ldap2nis (http://ldapconsole.source
Page 241 and 242:
Sympa http://www.sympa.org/ Sympa i
Page 243 and 244:
MaxWare Directory Explorer Version
Page 245 and 246:
LDAP Browser/Editor The LDAP Browse
Page 247:
pGina http://pgina.cs.plu.edu/index
Page 250 and 251:
saslauthd Options saslauthd a authm
Page 252 and 253:
saslauthd Options saslauthd a authm
Page 254 and 255:
saslauthd -a ldap saslauthd -a ldap
Page 256 and 257:
saslauthd -a ldap saslauthd -a ldap
Page 258:
saslauthd -a ldap LDAP related sasl
Page 261 and 262:
LDAP Mail Routing (draft-lachman-la
Page 263 and 264:
m4: LDAPROUTE_DOMAIN The behaviour
Page 265 and 266:
LDAP Mail Routing + sendmail The si
Page 267 and 268:
fc822 + sendmail Most distributions
Page 269 and 270:
LDAP SMTP Access Control One exampl
Page 271 and 272:
LDAP SMTP Access Control attributet
Page 273 and 274:
sendmailMTACluster attributetype (
Page 275 and 276:
sendmailMTA objectclass ( 1.3.6.1.4
Page 277 and 278:
sendmailMTAMapName attributetype (
Page 279 and 280:
sendmailMTAMap objectclass ( 1.3.6.
Page 281 and 282:
sendmailMTAAliasGrouping & sendmail
Page 283 and 284:
sendmailMTAAliasObject objectclass
Page 285 and 286:
sendmailMTAClass objectclass ( 1.3.
Page 287 and 288:
Configuring GNARWL /etc/gnarwl.cfg
Page 289 and 290:
The GNARWL Database
Page 291 and 292:
The PDC Tree ou=People,dc=Whitemice
Page 293 and 294:
The Samba Schema By default the Sam
Page 295 and 296:
ldap ssl =
Page 297 and 298:
uids, gids, and rids UNIX operating
Page 299 and 300:
Machine Accounts Beginning with NT4
Page 301 and 302:
Samba User Attributes ntPassword -
Page 303 and 304:
Samba Password Management
Page 305 and 306:
Migrating smbpasswd PHP smbpasswd r
Page 307:
Samba Versions The LDAP support in
Page 310 and 311:
Authentication Schemes --enable-bas
Page 312 and 313:
squid_pam_auth http://squid.sourcef
Page 314 and 315:
squid-ldap-match http://marasystems
Page 316 and 317:
squid_ldap_match squid_ldap_match -
Page 318 and 319:
squid_ldap_match squid_ldap_match -
Page 321 and 322:
ind & Openldap As of version 9.0 bi
Page 323 and 324:
The dnsZone Schema While the standa
Page 325 and 326:
objectclass: dNSZone (2/4) A very b
Page 327 and 328:
objectclass: dNSZone (4/5) The dnsZ
Page 329 and 330:
objectclass: dNSZone (6/6) dn: rela
Page 331 and 332:
Query Specifics It is very simple t
Page 333:
zone2ldap zone2ldap is a utility fo
Page 336 and 337:
The DHCP LDAP Patch http://www.neww
Page 338 and 339:
DHCP Schema In order to contain the
Page 340 and 341:
An Example Tree dc=Whitemice,dc=Org
Page 342 and 343:
dn: cn=192.168.3.0,cn=whitemice-dhc
Page 344:
dn: cn=xterm1,cn=group,cn=whitemice
Page 348 and 349:
Password Authentication Protocol Al
Page 350 and 351:
Microsoft Challange Host Au- thenti
Page 352 and 353:
LDAP chap-secrets entry An explanat
Page 354:
PoPToP http://www.poptop.org PoPToP
Page 357 and 358:
Sources Multiple address books (cal
Page 359 and 360:
Turba Source Maps The map array con
Page 361 and 362:
Turba Attribute Declaration Attribu
Page 363 and 364:
Turba LDAP Personal Address Book Th
Page 366 and 367:
What is pine? http://www.washignton
Page 368 and 369:
Using The DSA CTRL-T Select DSA Ent
Page 370:
Trianii http://www.edlund.org/hacks
Page 373 and 374:
State Of LDAP Support While Evoluti
Page 375 and 376:
evolutionPerson
Page 377 and 378:
Setting Up An LDAP Addressbook Name
Page 379 and 380:
Contact Details (Dialog relations t
Page 381:
Contact Details calCalURI Free/Busy
Page 384:
! ! òñðõõ ò ë}ô ó òñðõ
Page 388 and 389:
Color Coding How the attribute of a
Page 390 and 391:
Create With Template
Page 392:
Viewing Complex Attributes GQ has b
Page 395 and 396:
Bug#4607 Versions of Open Office, u
Page 397 and 398:
Creating an LDAP Data Source Under
Page 399 and 400:
Using The Address Book To insert da
Page 401:
Use The Address Book Results The re
Page 404 and 405:
NetMeeting Directory Kit (http://vy
Page 406 and 407:
PURRO VXW RK R JLKM PLQ ON QQZ M K
Page 408 and 409:
OpenLDAP as an ILS Agent (Initializ
Page 410 and 411:
OpenLDAP as an ILS Agent (Starting
Page 412 and 413:
GNOMEMeeting and ILS Entry your ILS
Page 414 and 415:
NetMeeting & ILS The comment is NOT
Page 416 and 417:
Breaking NetMeeting Exclusivity Net
Page 419 and 420:
DSML (http://www.dsml.org) DSML (Di
Page 421 and 422:
URI Declaration What does DSML look
Page 423 and 424:
DSML & XML-RPC (http://www.worldspo
Page 425 and 426:
Using the DSML Utilities You need t
Page 428 and 429:
What is xmlBlaster? http://www.xmlb
Page 430 and 431:
LDAP Module Limitations (From the L
Page 432 and 433:
What is Active Directory Active Dir
Page 434:
SRV records used by AD _ldap._tcp.d
Page 437 and 438:
ldap_connect The first step to cont
Page 439 and 440:
Control LDAP_OPT_DEREF LDAP_OPT_SIZ
Page 441 and 442:
ldap_get_option boolean ldap_get_op
Page 443 and 444:
ldap_unbind boolean ldap_unbind (re
Page 445 and 446:
ldap_errno Error Constant Value LDA
Page 447 and 448:
ldap_search resource ldap_search(re
Page 449 and 450:
ldap_get_entries array ldap_get_ent
Page 451 and 452:
ldap_compare Since LDAP permits the
Page 453 and 454:
ldap_delete boolean ldap_delete(res
Page 455 and 456:
ldap_mod_del boolean ldap_mod_del(r
Page 458 and 459:
Synchronous & Asynchronous
Page 460 and 461:
ldap_set_option The ldap_set_option
Page 462 and 463:
ldap_bind method parameter int ldap
Page 464 and 465:
ldap_search_parameters int ldap_sea
Page 466 and 467:
ldap_first_entry LDAPMessage* ldap_
Page 468 and 469:
ldap_get_dn char* ldap_get_dn(LDAP*
Page 470 and 471:
ldap_next_attribute char* ldap_next
Page 472 and 473:
ldap_count_values int ldap_count_va
Page 474 and 475:
int ldap_msgfree(LDAPMessage* msg)
Page 476 and 477:
ldap_perror void ldap_perror(LDAP*
Page 478 and 479:
Simple C LDAP Query init & bind Hos
Page 480 and 481:
printf("Objects Found: %d\n", ldap_
Page 482 and 483:
Simple C LDAP Query Close it up if
Page 484 and 485:
ldap_modify & ldap_modify_s
Page 486 and 487:
ldap_delete & ldap_delete_s
Page 489 and 490:
AIX and OpenLDAP AIX is a descenden
Page 491 and 492:
Compiling NSS LDAP on AIX tar -xvf
Page 493 and 494:
Authentication via NSS LDAP /etc/se
Page 495 and 496:
hosts local merge hosts dns service
Page 497 and 498:
NSORDER The NSORDER enviroment vari
Page 499 and 500:
¨ ¨ ¨ ¨
show all

ldapv3.pdf 7947KB Apr 17 2013 11:30:42 AM - mirror omadata

Create successful ePaper yourself

Delete template?

Save as template?