OpenLDAP replication

slurpd - 獨立的程式，監控 master ldap 的更動並記錄在 log，然後對 slave 做相同動作 (新版本 slapd 已不包含 slurpd)

 

syncrepl - 介於 ldap 核心與資料庫中間，當對 master 資料庫寫入資料時，同時寫入到 slave

OpenLDAP in Docker

OpenLDAP :

https://github.com/nickstenning/docker-slapd

# docker run \
-e LDAP_DOMAIN=example.com \
-e LDAP_ROOTPASS=admin \
-d slapd

Login DN:

cn=admin,dc=example,dc=com

Password:

admin

phpLDAPadmin :

https://github.com/osixia/docker-phpLDAPadmin

# docker run -p 80:80 \
-e LDAP_HOST=192.168.1.254 \
-e LDAP_LOGIN_DN=dc=example,dc=com \
-e LDAP_LOGIN_DN=cn=admin,dc=example,dc=com \
-d phpldapadmin

使用 phpLDAPadmin 匯入 ldif
https://raw.githubusercontent.com/projecthydra-labs/hydra-ldap/master/hydra-ldap-example.ldif

OpenLDAP

做目錄服務前, 先把架構(tree)畫出來!!

1988 X.500-Client <-> X.500-Server
1993 LDAP-Client <-> LDAP-Gateway <-> LDAP-Server
1995 LDAP-CLient <-> LDAP-Server

LDAP back end databases : BerkeleyDB, MySQL, Oracle, etc...

LDAP optimized for query

Schema
Database
Table
Data
Replication between db servers

nscd - GNU C Library: Name Service Cache Daemon

Client
    Pam LDAP
    PHP LDAP

Management Tool
    PhpLDAPadmin
    LDAP Explorer Tool

Implementation
    LDAP address book
    Authentication center
    LDAP relay
    DNS and LDAP
    Switch LDAP DB to mysql or others

Kerberos 5

Windows Boot Process with AD
    Client boot into windows
    Client get IP address
    Client query IP address for DC
    Client log on with computer account
    Client download and execute GPO rules
    Client running startup services
    User interactive login

DNS <-> AD+GPO <-> Exchange

email.pandalog.com
panda tpe