LDAP and OpenLDAP - FTP Directory Listing

More documents

Recommendations

Info

Samba SecurityThe ntpassword and lmpassword attributes should be treated as cleartext equivalents of the user's password. The method used to encryptthe password and produce these strings is easily reversed.Only administrators should have access to these values and theyshould only be transferred over a network with additional encryption(SSL, TLS, VPN, etc...)The safest solutions is to apply the following ACL directive:access to attrs=lmPassword,ntPasswordby 'cn=samba,ou=SystemAccounts,dc=Whitemice,dc=Org' writeby self writeby * auth
°°°°°°°°±²±±±±Migrating smbpasswdPHP smbpasswd reader:$smbpasswd = fopen("smbpasswd", "r");while ($smbinfo = fscanf($smbpasswd, "%[a zA 9,. ]:%[a zA 9,. ]:%[a zA 9,. ]:%[a zAZ0 9,. ]]:%[a zA 9,. ]:\n")) {list ($uid, $uidnumber, $lmpassword, $ntpassword, $userflags, $lastchange) = $smbinfo;$user_dn = ldap_get_uid_dn($uid);if (strlen($user_dn) > 0) {print "dn: " . $user_dn . "\n";print "objectclass: sambaAccount\n";print "ntpassword: " . $ntpassword . "\n";print "lmpassword: " . $lmpassword . "\n";print "acctFlags: [" . $userflags . "]\n";print "logonTime: 1\n";print "logoffTime: 1\n";print "kickoffTime: 1\n";print "pwdCanChange: 1\n";print "pwdMustChange: 1\n";print "homedrive: F\n";print "\n";}}fclose($smbpasswd);°°Z0°°Z0°°Z09,. ]:[%[a zA°°Z0°°Z0If you need to convert your existing 2.x.xformat smbpasswd file to LDAP you can usethe perl scripts included in the examplessection of the Samba documentation./usr/share/doc/samba2.2.3/examples/LDAPFortunately, if you need to use a language other thanperl for the translation or need to customize thetranslation, the format of the smbpasswd file is quitesimple and the fields correspond directly to the mostimportant sambaAccount attributes.The correspondence of the fields in an smbpasswd file from a Samba 2.x.xserver to the LDAP sambaAccount objectclass attributes is as follows:uid:uidnumber:lmpassword:ntpassword:userflags:pwdLastChangeNote: In smbpasswd the pwdLastChange is a hex encoded value, while pwdLastChange insambaAccount is an integer epoch time stamp. So this value will need to be recalculated, or moresimply, discarded.
Page 1 and 2:
LDAP andOpenLDAP(on the Linux Platf
Page 3 and 4:
KLUGThe master copy of this documen
Page 5 and 6:
¢What is LDAP?A cross platform pro
Page 7 and 8:
£What does a directory looklike?Ba
Page 9 and 10:
¤Why?Directories offer many benefi
Page 11 and 12:
¥¥The Advantages of LDAP v3over L
Page 13 and 14:
LDAP(Schema)
Page 15 and 16:
¦What is an OID?Every schema eleme
Page 17 and 18:
WARNING(Object Class Type)Early Ope
Page 19 and 20:
Attribute SchemaOID Name (alias for
Page 21 and 22:
Attribute Syntaxesbinary 1.3.6.1.4.
Page 23 and 24:
The OID is the truth.The names of a
Page 25 and 26:
PartitioningThe entire LDAP directo
Page 27 and 28:
Superior InformationSuperior inform
Page 29 and 30:
LDAP(SpecialObjects andAttributes)
Page 31 and 32:
Operational ACI AttributesIf your O
Page 33 and 34:
subSchemaOne of the most useful bit
Page 35 and 36:
The ManageDsaIT ControlOID: 2.16.84
Page 37 and 38:
The "alias" objectThe alias object
Page 39 and 40:
Start TLSExtended OperationOID: 1.3
Page 41 and 42:
LDAP(OpenLDAPConfiguration,Global)
Page 43 and 44:
The Config FilesUsually in /etc/lda
Page 45 and 46:
disallowThe disallow configuration
Page 47 and 48:
loglevelThe loglevel directive cont
Page 49 and 50:
Checking the SSL ConfigurationOnce
Page 51 and 52:
The ties that bind....The processes
Page 53 and 54:
###$SASL RealmsOpenLDAP v2.0.x supp
Page 55 and 56:
)**OpenLDAP + SASL + GSSAPI(OpenLDA
Page 57 and 58:
LDAP(OpenLDAPConfiguration,Backends
Page 59 and 60:
,,backldapThe back ldap module acts
Page 61 and 62:
001backpasswdThe back passwd backen
Page 63 and 64:
Back3 metabackmeta22 is currently o
Page 65 and 66:
SlapindexIf additional indexes are
Page 67 and 68:
6Buffer Stuffing(Single Threaded In
Page 69 and 70:
89FilesystemSince the LDAP database
Page 71:
;Journalized FilesystemsBy default
Page 74 and 75:
?? ?Enabling the SQL backendIn orde
Page 76 and 77:
AB“ rdbms_depend”The exact SQL
Page 78 and 79:
Attribute Mappingsldap_attr_mapping
Page 80 and 81:
C Cdn Mappingldap_entriesThe purpos
Page 82 and 83:
Referral Mappingldap_referralsldap_
Page 84 and 85:
Stored Procedure Examples
Page 86 and 87:
LDAP(Replication &Redundancy)
Page 88 and 89:
GGGReplication DiagramReplication D
Page 90 and 91:
KKMLPopulating SlavesOne of the mos
Page 92 and 93:
NNNNThe Replication LogOn serveral
Page 94 and 95:
OOPPThe Rejection LogThe rejection
Page 96 and 97:
QChasing ReferralsIf a client submi
Page 98 and 99:
LDAP(AccessControl)
Page 100 and 101:
Access LevelsOpenLDAP support four
Page 102 and 103:
ACL Matching PatternsThere are seve
Page 104 and 105:
TUGroup MatchingOne of the most pow
Page 106 and 107:
Regular Expression MatchingThe use
Page 108 and 109:
Anonymous UsersWhen an application
Page 110 and 111:
selfwriteThe selfwrite access direc
Page 112 and 113:
LDAP(AccessControlwith ACI)
Page 114 and 115:
Advantages of ACIThe single biggest
Page 116 and 117:
OpenLDAPacl & OpenLDAPaciEvery obje
Page 118 and 119:
The ACI ACL (OpenLDAPaci)In order t
Page 120 and 121:
OpenLDAPaci: RightsThe rights field
Page 122 and 123:
LDAP(CommonObjectclasses)
Page 124 and 125:
[\RFC2307The RFC document specifies
Page 126 and 127:
Hierarchy: cosine.schemadSA pilotDS
Page 128 and 129:
^^_Hierarchy: Kerberos V & Sambakrb
Page 130 and 131:
LDAP(SystemIntegration)
Page 132 and 133:
etc/openldap/ldap.confThe defaults
Page 134 and 135:
The LDAP NSS ModulesGLIBC systems u
Page 136 and 137:
cA PAM LDAP login file#%PAM 1.0auth
Page 138 and 139:
etc/ldap.conftimelimit 30The maximu
Page 140 and 141:
passwd PAM file(/etc/pam.d/passwd)a
Page 142 and 143:
LDAP(Migration)
Page 144 and 145:
Using the scripts...The file migrat
Page 146 and 147:
Extended MigrationAn extended migra
Page 148 and 149:
LDAP(ExampleNSS Objects)
Page 150 and 151:
An entry ofposixGroup Objectusers:x
Page 152 and 153:
An entry such ofipService Objectjet
Page 154 and 155:
ipProtocol ObjectAn entry ofpipe 13
Page 156 and 157:
What is an SRV record?Traditionally
Page 158 and 159:
h1123 vs. 2181SRV protocol and serv
Page 160 and 161:
SRV and nss_ldapTo use SRV records
Page 162 and 163:
LDAP(Data Tips)
Page 164 and 165:
Loading Tip: Normalize DNThe LDAP s
Page 166 and 167:
nInvalid DataIf, when trying to loa
Page 168 and 169:
LDAP(Utilities)
Page 170 and 171:
vLDIFLDAP Directory Information Fil
Page 172 and 173:
wwwwwwwwldapsearchldapsearch [optio
Page 174 and 175:
z{{ldapmodify / ldapaddThe ldapmodi
Page 176 and 177:
~Binding with the utilities....If y
Page 178 and 179:
‚ƒ„……slapcatslapcat is the
Page 180 and 181: gqgq is an LDAP v3 utility for GnaO
Page 182 and 183: gq(Schema browser)
Page 184 and 185: HADHyperactive Directory Administra
Page 186 and 187: Directory Administrator(http://www.
Page 188 and 189: †LDAP Browser / Editor(http://www
Page 190 and 191: ‡ˆLDIF To VCardhttp://www.pawebw
Page 192 and 193: ŠŠŠŠ‹‹‹ŒŽŽŽFrom the c
Page 194 and 195: Wallal(http://www.mnot.net/wallal/h
Page 196 and 197: mod_auth_ldap(http://nona.net/softw
Page 198 and 199: Gnarwl(http://www.oss.billiton.de/s
Page 200 and 201: ””•••m4: LDAPDefaultSpecT
Page 202 and 203: ˜m4: LDAPROUTE_DOMAINThe m4 sendma
Page 204 and 205: m4: LDAPROUTE_DOMAINThe results of
Page 206 and 207: RFC822rfc822 defines a the concept
Page 208 and 209: ¡¡¡LDAP + sendmailYou can also d
Page 210 and 211: LDAP SMTP Access Controlcn=Allow SM
Page 212 and 213: ¤¥¥§¥¥¥¥¥¦Installing GNAR
Page 214 and 215: GNARWL Integration
Page 216 and 217: LDAP(SambaPDC)This information now
Page 218 and 219: © ©©© ©©©Building Samba1. Gr
Page 220 and 221: [globals]encrypt passwords = yesdom
Page 222 and 223: The Admin And His SecretsSince the
Page 224 and 225: Samba UsersSamba users must be UN*X
Page 226 and 227: ¬¬¬Samba User Attributesprofil
Page 228 and 229: Samba TimesThe sambaAccount objectc
Page 232 and 233: Samba Attribute IndexesFor good per
Page 234 and 235: ³´bind & OpenldapAs of version 9.
Page 236 and 237: ··The dnsZone SchemaWhile the sta
Page 238 and 239: objectclass: dNSZone (2/4)A very ba
Page 240 and 241: ¸¹¹¹ººººobjectclass: dNSZon
Page 242 and 243: LDAP(LTSP)
Page 244 and 245: LDAP(ILS)
Page 246 and 247: NetMeeting Directory Kit(http://vyg
Page 248 and 249: ¾ILS AttributesDescription Attribu
Page 250 and 251: ¿OpenLDAP as an ILS Agent(Initiali
Page 252 and 253: ÀÀÀÀOpenLDAP as an ILS Agent(St
Page 254 and 255: GNOMEMeeting and ILSEntry your ILS
Page 256 and 257: NetMeeting & ILSThe comment is NOT
Page 258 and 259: ÁBreaking NetMeeting ExclusivityNe
Page 260 and 261: ÃLDAP(xml &xmlrpc)
Page 262 and 263: ÄWhy DSMLWhat do directories and X
Page 264 and 265: ÉÉDSML MiscFor binary data DSML s
Page 266 and 267: DSML ToolsA set of DSML utilities (
Page 268 and 269: ÐÑÐÑÑÑÑÑCastor(http://casto
Page 270 and 271: ÒWhat is xmlBlaster?http://www.xml
Page 272 and 273: ÔLDAP Module Limitations(From the
Page 274 and 275: What is Active Directory
Page 276 and 277: ÖÖÖ××SRV records used by AD_ld
Page 278 and 279: LDAP(C)
Page 280 and 281:
ldap_init & ldap_openBefore any oth
Page 282 and 283:
ØØldap_bind method parameterint l
Page 284 and 285:
ldap_search_parametersint ldap_sear
Page 286 and 287:
ldap_first_entryLDAPMessage* ldap_f
Page 288 and 289:
Úldap_get_dnchar* ldap_get_dn(LDAP
Page 290 and 291:
ldap_next_attributechar* ldap_next_
Page 292 and 293:
ldap_count_valuesint ldap_count_val
Page 294 and 295:
Üint ldap_msgfree(LDAPMessage* msg
Page 296 and 297:
void ldap_perror(LDAP* ld, char* s)
Page 298 and 299:
Simple C LDAP Queryinit & bindHost
Page 300 and 301:
printf("Objects Found: %d\n",ldap_c
Page 302 and 303:
Simple C LDAP QueryClose it upif (b
Page 304 and 305:
ldap_modify & ldap_modify_s
Page 306 and 307:
ldap_delete & ldap_delete_s
Page 308 and 309:
LDAP(AIX)
Page 310 and 311:
LDAP(MoreInformation....)
show all

LDAP and OpenLDAP - FTP Directory Listing

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?