Openldap: Difference between revisions
From wikinotes
No edit summary |
|||
| (One intermediate revision by the same user not shown) | |||
| Line 3: | Line 3: | ||
* sharing information with unrelated services | * sharing information with unrelated services | ||
* fine-grained, filter-rule based authorization to every stored attribute | * fine-grained, filter-rule based authorization to every stored attribute | ||
It does this by: | It does this by: | ||
| Line 60: | Line 59: | ||
= Integrations = | = Integrations = | ||
<blockquote> | <blockquote> | ||
{| | {| | ||
|- | |- | ||
| [[phpldapadmin]] | | [[phpldapadmin]] | ||
Latest revision as of 15:38, 2 July 2022
LDAP is a read-optimized, scalable(distributed) way of storing data with 2x goals:
- sharing information with unrelated services
- fine-grained, filter-rule based authorization to every stored attribute
It does this by:
- Storing information using pre-defined, standardized Attributes (posixPassword, username, employeeNumber, mail, ipaddress, port, ...)
- Create/ReUse groups of attributes called ObjectClasses (Person, Organization, Account, ...)
- Entries are instances of these ObjectClasses.
- Entries are stored in a hierarchy, which can be anything you'd like.
Using this stored information, LDAP can be used to integrate several entirely unrelated services.
- It can be used to handle multiple authentication methods for single-sign-in (SSO)
- It can be used to share user images, descriptions etc with various programs
- It can use to determine what resources (websites, services, machines) a user should have permission to use.
Documentation
official docs https://www.openldap.org/doc/admin24/
Locations
/var/lib/ldaplocation of ldap data (generally in bdb files) /etc/ldap/slapd.dlocation of ldap configuration
Notes
openldap install openldap tutorials openldap concepts openldap components openldap configuration openldap usage openldap urls
Integrations
phpldapadmin
