LDAP server and authentication

Question

linux

You need to raise LDAP and configure authentication. Ubuntu Server system.

Actually, I can’t understand anything from these LDAP schemes, I couldn’t find an article on the Internet that clearly explains all the points, just some HOW TOs where you need to do a sequence of actions without thinking.

Tell me, in which direction to dig? To raise the server, as I understand it, I need slapd and ldap-utils. But what to do next with them - how to figure out the schemes (which ones are needed, how to create them) and screw the authentication itself?

Answer 1

Use FreeIPA luke

Answer 2

At one time, this article and a few more from this site helped me a lot .

Answer 3

System authentication?
The general plan is this:
1. Raise the directory.
2. In it, create objects of class posixGroup and posixAccount; attach aux-classes to posixAccount a la simpeSecurityObject (contains the userPassword field)
3. Set pam_ldap and configure it to authenticate by directory. There you will need to register the address of the ldap server, as well as filters for selecting objects from it.
as you expand, you will understand that computers will also need similar entries in the directory and, accordingly, passwords, how to configure acl and the like.
In general, if you want to figure out how it works “from scratch” to a MS AD-level system, a couple of months will go away. Directories are a good technology, but not very easy to understand.

Answer 4

To get started, it is recommended to search Google for "site:help.ubuntu.com" and read all the articles found.
There is no theory in them, but there are detailed step-by-step instructions on how to get a working configuration.
Having a working system, it will become much easier to understand the theory.

Answer 5

I recently raised Samba4 on ubuntu. It is very good as a reliable AD server. Supports management tools from Microsoft, and through webmin too. Did on the basis of this manual and went here for tips . Everything is clear and detailed.