Hi Nicolas,
On 8/19/19 9:59 AM, Nicolas Kovacs wrote:
Currently the network uses a bone-headed single-sign-on configuration
based on NIS and NFS. I'm well aware of the potential flaws of this
setup, and I intend to replace it. In the past I've tried to wrap my
head around LDAP, but I bluntly admit I failed miserably every time.
> I just read the "Single Sign On" chapter in the fine "Unix & Linux
> System Administration Handbook", which states 389 Directory Server
> as a preferable alternative to the plain OpenLDAP server.
If you are interested in single sign-on, automount, etc., FreeIPA (aka
"Identity Management" in Red Hat) might be interesting for you.
FreeIPA uses 389 Directory Server as database, but you usually don't get
in touch with the LDAP server directly. You can manage FreeIPA using the
command line and browser, and a lot of things are automated or at least
should be easier than configuring everything manually.
These are the Identity Management docs for RHEL 7:
*
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/linux_domain_identity_authentication_and_policy_guide/
*
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/system-level_authentication_guide/
*
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/
(maybe not relevant for your use case)
I have three sandbox machines in my office and some time to experiment,
and I've even managed so far to install 389 DS on one of these machines
using the online documentation and various tutorials.
First things first. I'm a new user, so I checked out the project pat at
https://www.port389.org/. I clicked on "Get started with a new
install"... and got stuck since the documentation doesn't work on my
system (CentOS 7).
* https://www.port389.org/docs/389ds/howto/quickstart.html
Eventually I figured out that Red Hat DS has a working documentation,
although I felt a bit like someone looking for a receipt for pasta
bolognese and getting a full-blown online course in food biochemistry.
If you use CentOS, the Red Red Hat Directory Server guides should work.
Additionally, they are frequently updated.
https://access.redhat.com/documentation/en-us/red_hat_directory_server/
I understand that the docs contain a lot of information, what could be
overwhelming if you are new to LDAP. If you have any suggestion what we
can improve, please let me know (or open a ticket:
https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Directory%20Server)
The QuickStart page sports a link "If you want to learn more about what
ldap is, you should read our “ldap concepts” guide." So I clicked on
that but unfortunately the link is dead. I admit I have yet to find a
comprehensive introduction to LDAP that is suitable for folks like me
with an IQ below 200.
It's not a short introduction, but the RHDS Deployment Guide could maybe
answer some of your general questions about LDAP:
https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/deployment_guide/
Regards,
Marc
--
Marc Muehlfeld (Senior Technical Writer)
Customer Content Services
_______________________________________________________________________________
Red Hat GmbH, Werner-von-Siemens-Ring 14, 85630 Grasbrunn, Germany
http://www.de.redhat.com/, Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Michael O'Neill,
Tom Savage, Eric Shander
_______________________________________________
389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx
