LDAP System Administration

Gerald (Jerry) Carter received his Masters degree in Computer Science from Auburn University, where he continues to pursue his PhD. He has been a member of the SAMBA development Team since 1998 and his involvement with UNIX systems and network administration of UNIX began in 1995. Jerry currently works for HP, working on embedded printing appliances. He has published articles with various web-based magazines and teaches instructional courses as a consultant for several companies and conferences. Gerald has also written books for SAMS Publishing.

• Preface Part I. LDAP Basics 1. "Now where did I put that...?", or "What is a directory?" The Lightweight Directory Access Protocol What Is LDAP? LDAP Models 2. LDAPv3 Overview LDIF What Is an Attribute? What Is the dc Attribute? Schema References Authentication Distributed Directories Continuing Standardization 3. OpenLDAP Obtaining the OpenLDAP Distribution Software Requirements Compiling OpenLDAP 2 OpenLDAP Clients and Servers The slapd.conf Configuration File Access Control Lists (ACLs) 4. OpenLDAP: Building a Company White Pages A Starting Point Defining the Schema Updating slapd.conf Starting slapd Adding the Initial Directory Entries Graphical Editors 5. Replication, Referrals, Searching, and SASL Explained More Than One Copy Is "a Good Thing" Distributing the Directory Advanced Searching Options Determining a Server's Capabilities Creating Custom Schema Files for slapd SASL and OpenLDAP Part II. Application Integration 6. Replacing NIS More About NIS Schemas for Information Services Information Migration The pam_ldap Module The nss_ldap Module OpenSSH, PAM, and NSS Authorization Through PAM Netgroups Security Automount Maps PADL's NIS/LDAP Gateway 7. Email and LDAP Representing Users Email Clients and LDAP Mail Transfer Agents (MTAs) 8. Standard Unix Services and LDAP The Directory Namespace An FTP/HTTP Combination User Authentication with Samba FreeRadius Resolving Hosts Central Printer Management 9. LDAP Interoperability Interoperability or Integration? Directory Gateways Cross-Platform Authentication Services Distributed, Multivendor Directories Metadirectories Push/Pull Agents for Directory Synchronization 10. Net::LDAP and Perl The Net::LDAP Module Connecting, Binding, and Searching Working with Net::LDAP::LDIF Updating the Directory Advanced Net::LDAP Scripting Part III. Appendixes A. PAM and NSS B. OpenLDAP Command-Line Tools C. Common Attributes and Objects D. LDAP RFCs, Internet-Drafts, and Mailing Lists E. slapd.conf ACLs Index

"This is a clearly written and well structured book with good use of example and figures... I thoroughly commend the text to those who are looking to centralise information directories." - Raza Rizvi, news@UK, December 2003