Deploying OpenLDAP

Prelims
Contents at a Glance
Contents
About the Author
About the Technical Reviewers
Acknowledgments
Preface
	What This Book Covers
	Who This Book Is For
	Source Code
Introduction
	X.500
	Naming Services
		Yellow Pages
		NIS
		NIS+
		DNS
	Relational Model
	LDAP Standards
Assessing Your Environment
	Gathering Information
		Name
		E-mail
		Phone
		PKI Information
		Badge
		Customer Data
	Creating an Ongoing Process
		Changing Application Sources
			User-Facing Applications
			Middleware
			Back-End Systems
		Understanding Meta-Directories
	Avoiding Mistakes
		LDAP As Oracle
		LDAP As a Sync Source
		Shortsighted Deployment
	Summary
Understanding Data Definitions
	Defining Your Schema
	Understanding Schemas
		ASN Schema Format
		Object Identifiers (OIDs)
		Attributes
			Attribute Name
			Additional Attribute Information
			Attribute Syntax
		Object Classes
			Abstract Object Classes
			Structural Object Classes
			Auxiliary Object Classes
		Other Data Definition Information
			Groups
			Roles
			Class of Service
	Understanding Distinguished Names (DNs)
		Schema Checking
		Referential Integrity
	Structuring the Directory Information Tree (DIT)
		Regional Deployment of Information
		Functional Deployment of Information
		Organization by Business Function or Group
	Introducing the LDAP Data Interchange Format (LDIF)
		LDAP Operations
			Changetype: add
			Changetype: modify
			Changetype: modrdn
		Chaining Operations
	Indexing Data
	Summary
Implementing Deployment, Operations, and Administration Strategies
	Separating Your Environments
	Setting Up Classes of Hosts
	Using Naming Conventions
		Using the Creative Convention
			RFC 1178
			RFC 2100
		Using the Logical Convention
			Data Center Layout
			Pure Function
			Function and Major Designation
		Reaching a Compromise
	Following Standard Procedures
		Using the Standard Host Specifications
		Using the Standard Host Installation
		Using the Standard Application Installation
	Running the Application
		Starting the Application
		Stopping the Application
	Using Command-Line Options
	Implementing Logs
	Summary
Installing OpenLDAP
	Choosing a Distribution
	Setting Up Your System
		Choosing a Special User
		Obtaining the Distribution
	Performing the Base Installation
	Compiling OpenLDAP
	Creating a Local Database
	Creating an Offline Database
	Using LDAP Search Filters
	Using OpenLDAP Utilities
		ldapmodify (1) and ldapadd (1)
		ldapsearch (1)
		ldapdelete (1)
		ldapmodrdn (1)
		slapcat (8C)
		slapadd (8C)
		slapindex (8C)
	Summary
Implementing OpenLDAP
	How Much RAM Do You Need?
	How Much Disk Space Do You Need?
	Considering Security in Your Implementation
		Authentication
		SASL
			SASL Proxy Authorization
			Shared-Secret Mechanisms
		X.509 Certificates
		Transport Layer Security
		Access Control
		Kerberos
	Understanding Replication
		changelog/Replication Log
		slurpd
		updateref
	Importing Databases
		slapcat
		Testing
	Understanding Referrals
		DNS Resource Records for Service Location
		Localized Scope
	Understanding the Installation Structure
		ldap.conf
			Systemwide Configurations
			User-Only Configurations
			SASL Options
		slapd.conf
		slapd.at.conf
		slapd.oc.conf
	Summary
Scripting and Programming LDAP
	Utilizing Command-Line Tools
		LDAP Controls
		LDAP API
			Synchronous vs. Asynchronous
			Various SDKs
			Downloading the Netscape C SDK
			API Calls
		Obtaining the LDAP Perl API
		Using the LDAP Perl API
			Error Processing
			Connection Management Functions
			Functions That Perform Operations on Entries
		Mozilla::LDAP::API
			ldap_abandon(ld,msgid)
			ldap_abandon_ext(ld,msgid,serverctrls,clientctrls)
			ldap_add(ld,dn,attrs)
			ldap_add_ext(ld,dn,attrs,serverctrls,clientctrls,msgidp)
			ldap_add_ext_s(ld,dn,attrs,serverctrls,clientctrls)
			ldap_add_s(ld,dn,attrs)
			ldap_bind(ld,dn,passwd,authmethod)
			ldap_bind_s(ld,dn,passwd,authmethod)
			ldap_controls_free(ctrls)
			ldap_create_filter(buf,buflen,pattern,prefix,suffix,attr,value,valwords)
			ldap_create_persistentsearch_control(ld,changetypes,changesonly, return_echg_ctrls,ctrl_iscritical,ctrlp)
			ldap_delete(ld,dn)
			ldap_delete_ext(ld,dn,serverctrls,clientctrls,msgidp)
			ldap_delete_ext_s(ld,dn,serverctrls,clientctrls)
			ldap_delete_s(ld,dn)
			ldap_err2string(err)
			ldap_explode_dn(dn,notypes)
			ldap_explode_rdn(dn,notypes)
			ldap_extended_operation(ld,requestoid,requestdata,serverctrls,clientctrls,msgidp)
			ldap_extended_operation_s(ld,requestoid,requestdata,serverctrls, clientctrls,retoidp,retdatap)
			ldap_get_dn(ld,entry)
			ldap_get_entry_controls(ld,entry,serverctrlsp)
			ldap_get_option(ld,option,optdata)
			ldap_get_values(ld,entry,target)
			ldap_get_values_len(ld,entry,target)
			ldap_init(host,port)
			ldap_init_getfilter(fname)
			ldap_init_getfilter_buf(buf,buflen)
			ldap_is_ldap_url(url)
			ldap_modify(ld,dn,mods)
			ldap_modify_ext(ld,dn,mods,serverctrls,clientctrls,msgidp)
			ldap_modify_ext_s(ld,dn,mods,serverctrls,clientctrls)
			ldap_modify_s(ld,dn,mods)
			ldap_modrdn(ld,dn,newrdn)
			ldap_modrdn_s(ld,dn,newrdn)
			ldap_modrdn2(ld,dn,newrdn,deleteoldrdn)
			ldap_modrdn2_s(ld,dn,newrdn,deleteoldrdn)
			ldap_next_attribute(ld,entry,ber)
			ldap_next_entry(ld,entry)
			ldap_parse_sasl_bind_result(ld,res,servercredp,freeit)
			ldap_perror(ld,s)
			ldap_result(ld,msgid,all,timeout,result)
			ldap_result2error(ld,r,freeit)
			ldap_sasl_bind(ld,dn,mechanism,cred,serverctrls,clientctrls,msgidp)
			ldap_sasl_bind_s(ld,dn,mechanism,cred,serverctrls,clientctrls,servercredp)
			ldap_search(ld,base,scope,filter,attrs,attrsonly)
			ldap_search_ext(ld,base,scope,filter,attrs,attrsonly,serverctrls,clientctrls, timeoutp,sizelimit,msgidp)
			ldap_search_ext_s(ld,base,scope,filter,attrs,attrsonly,serverctrls,clientctrls, timeoutp,sizelimit,res)
			ldap_search_s(ld,base,scope,filter,attrs,attrsonly,res)
			ldap_set_lderrno(ld,e,m,s)
			ldap_set_option(ld,option,optdata)
			ldap_simple_bind(ld,who,passwd)
			ldap_simple_bind_s(ld,who,passwd)
	Performing Operations Against Your OpenLDAP Directory
	Using Java and JNDI
	OASIS Standards
		Directory Services Markup Language (DSML)
			Introduction
			A Note on Ambiguous Terminology
			The DSML Namespace URI
			Conceptual Overview
			Top-Level Structure
			Directory Entries
			The entry Element Type
			Entry Object Class
			Directory Attributes
			Multivalued Attributes
			Binary Data
		Directory Schema
			Object Classes
			Attribute Type Definitions
		Conformance
	Summary
Integrating at the System Level
	Introducing Network Information Services
	Introducing Standard NIS Configurations
		Performing Synchronization with LDAP
		Performing Direct Integration
	Configuring the LDAP Client (Host)
		Using the ldapclient Utility
		Configuring NSS
		Configuring PAM
		Setting Up Security
	Using Sendmail
		Enabling the Software
		Building the Binaries
		Migrating Information
		Setting Up LDAP Routing
	Summary
Integrating OpenLDAP with Applications, User Systems, and Client Tools
	Preparing for Integration
	Integrating Apache
	Integrating Pine
	Integrating Samba
	Integrating Eudora
	Integrating Exchange
	Integrating LDAP Browsers
	Integrating Appliances
	Summary
Index