LDAP and OpenLDAP (LDAP)

Unix-like systems, Linux - services

This course aims to introduce LDAP technologies to students and to teach them basic OpenLDAP server administration. Students will learn how to install OpenLDAP server, learn to configure LDAP as user database in Linux. Students will also learn how to integrate LDAP with common Linux services.

COURSE LOCATION AND AVAILABLE DATES



Private training

This course is not scheduled as a public course.
It is delivered exclusively as customised training. The content, duration, date, and delivery format are tailored to the customer's requirements and can also be provided in English.

Request customised training

Course content:

Hide details
  • LDAP Concepts and Architecture
    1. LDAP and X.500 technical specification
    2. Attribute definitions
    3. Directory namespaces
    4. Distinguished names
  • Directory Design
    1. Define LDAP directory content
    2. Organize directory
    3. Planning appropriate Directory Information Trees
  • Schemas
    1. LDAP schema concepts
    2. Create and modify schemas
    3. Attribute and object class syntax
  • Compiling and Installing OpenLDAP
    1. Compile and configure OpenLDAP from source
    2. Manage OpenLDAP daemon
    3. Troubleshoot errors during installation
  • Access Control Lists in LDAP
    1. Plan LDAP access control lists
    2. Grant and revoke LDAP access permissions
    3. Access control syntax
  • LDAP Replication
    1. Replication concepts
    2. Configure OpenLDAP replication
    3. Execute and manage slurpd
    4. Analyze replication log files
    5. Understand replica hubs
    6. LDAP referrals
    7. LDAP sync replication
  • Securing the Directory
    1. Securing the directory with SSL and TLS
    2. Firewall considerations
    3. Unauthenticated access methods
    4. User / password authentication methods
    5. Maintanence of SASL user DB
    6. Client / server certificates
  • LDAP Server Performance Tuning
    1. Measure LDAP performance
    2. Tune software configuration to increase performance
    3. Understand indexes
  • OpenLDAP Daemon Configuration
    1. slapd.conf configuration directives
    2. slapd.conf database definitions
    3. slapd and its command line options
    4. Analyze slapd log files
  • Searching the Directory
    1. Use OpenLDAP search tools
    2. Optimize LDAP search queries
    3. Knowledge of search filters and their syntax
  • LDAP Command Line Tools
    1. Use the ldap* tools to access and modify the directory
    2. Use the slap* tools to access and modify the directory
  • Whitepages
    1. Plan whitepages services
    2. Configure whitepages services
    3. Configure clients to retrieve data from whitepages services
  • LDAP Integration with PAM and NSS
    1. Configure PAM to use LDAP for authentication
    2. Configure NSS to retrieve information from LDAP
    3. Configure PAM modules in various Unix environments
  • Integrating LDAP with Unix Services
    1. Integrate SSH with LDAP
    2. Integrate FTP with LDAP
    3. Integrate HTTP with LDAP
    4. Integrate FreeRADIUS with LDAP
  • Integrating LDAP with Samba
    1. Migrate from smbpasswd to LDAP
    2. Understand OpenLDAP Samba schema
    3. Understand LDAP as a Samba password backend
  • Integrating LDAP with Email Services
    1. Plan LDAP schema structure for email services
    2. Create email attributes in LDAP
    3. Integrate Postfix with LDAP
  • Measure Resource Usage
    1. Measure CPU, memory, disk I/O, network I/O
    2. Measure firewalling and routing throughput
    3. Map client bandwidth usage
  • Troubleshoot Resource Problems
    1. Match / correlate system symptoms with likely problems
    2. Identify bottlenecks in a system
  • Analyze Demand
    1. Identify capacity demands
    2. Detail capacity needs of programs
    3. Determine CPU / memory needs of programs
    4. Assemble program needs into a complete analysis
  • Predict Future Resource Needs
    1. Predict capacity break point of a configuration
    2. Observe growth rate of capacity usage
    3. Graph the trend of capacity usage
Prerequisites:
Basic Linux administration.
Recommended previous course:
Linux – Basic Administration (LNX1)
Schedule:
3 days (9:00-17:00)

Training and learning environment

IT classroom with desks, computer monitors, and a projection screen at the front.
What does the environment for in-person IT courses look like?We hold training courses in our own classrooms equipped with modern computer equipment for each participant and a large projection screen. Each workstation is fitted with a powerful computer for seamless practical exercises, and the environment supports a calm, friendly atmosphere during training.
IT classroom with desks, computer monitors, and a projection screen at the front.
Do I need to bring my own laptop to the classroom IT course?Our training rooms are fully equipped, so you do not need to bring your own laptop. A modern computer with all necessary hardware and software is ready for you at your workstation.
Sample ICT Pro certificate of successful completion of an IT training course.
Will you receive an official certificate after completing an IT course?Yes, upon successful completion of the training course, you will receive an official ICT Pro certificate confirming your participation and acquired technical skills. You can use it to verify your qualifications or add it to your professional profile.
Exterior view of the COMGUARD office building on Sochorova Street in Brno.
Where can you find our training center in Brno?The premises of the ICT Pro training center are located on the 1st floor of the COMGUARD building at Sochorova 38 in Brno. Positioned on the border of Žabovřesky and Komín, the location is easily accessible by both car and public transport.
Exterior view of the Opatov Park office building in Prague, Chodov.
Where can you find our training center in Prague?The premises of the ICT Pro training center are located on the 1st floor of the Opatov Park building at Líbalova 1, Prague 11 – Chodov. The location provides a comfortable environment for your education with convenient access.
Fully equipped kitchenette with a coffee machine, microwave, sink, and shelves with cups and glasses.
What facilities and refreshments are available to you during training breaks?Our training centers feature a fully equipped kitchenette for a comfortable break during your courses. The facilities include a coffee machine, microwave, kettle, and a wide selection of drinks and snacks.
Coffee station featuring an automatic coffee machine, yellow and white cups, glasses, and syrups.
What beverage refreshments are available during your course?A beverage station with a coffee machine, teas, syrups, and water is at your disposal throughout the entire training session. You can enjoy a coffee or another drink of your choice anytime during breaks.
Table with sweet pastries, fruit syrups, a water dispenser, and glasses set up for training participants.
What light refreshments are provided for you during the courses?During course breaks, participants can enjoy light sweet snacks, pastries, and fruit syrups to mix their own drinks. Fresh water dispenser and plates are also available for your convenience.
Wicker baskets filled with packaged savory snacks, sweet biscuits, and snack bars.
Should I bring my own snacks to ICT Pro training?There is no need to. A wide selection of savory snacks, sweet biscuits, and snack bars is available for you during breaks. Boost your energy for all-day focus right inside the training center premises.
Outdoor wooden terrace with green surroundings by the glass building of the training center.
Can you spend training breaks in the fresh air?Yes, an outdoor terrace is available at our training center. During breaks between learning sessions, you can relax in the fresh air in a pleasant green environment.
Spacious outdoor wooden terrace with seating and views of the surrounding area.
Where can you relax during course breaks?Our training center features a spacious outdoor terrace with seating options. During breaks between learning sessions, you can step outside to relax and recharge in the fresh air.