I'm always on the lookout for information on advanced OpenLDAP topics, something I've found to be in short supply on the internet.
By advanced I mean documentation, tutorials and howto's that go beyond just setting up a simple standalone directory or an address book and gets into doing things with all of the fancy backends and overlays available in OpenLDAP these days.
I recently came across the Symas forums which have a few nice articles on advanced OpenLDAP topics:
By advanced I mean documentation, tutorials and howto's that go beyond just setting up a simple standalone directory or an address book and gets into doing things with all of the fancy backends and overlays available in OpenLDAP these days.
I recently came across the Symas forums which have a few nice articles on advanced OpenLDAP topics:
- Password policies (Managing Password Policies in the Directory) which describes how to add password policies such as expiry, aging, minimum length, history, etc which are features considered standard in Novell E-directory and Microsoft Active Directory accounts but are lacking in the basic OpenLDAP authentication directory configuration. Unfortunately, it falls short of giving any information on whether clients such as nss_ldap and pam_ldap support this, so I will need to test this in a lab sometime.
- The Transluscent Overlay sounds really useful. One use I have for this feature is to tack the attributes I need for unix authentication (e.g. uid, gid, etc) to our organisations main directory (which I have no control over) so that I my users can use the same password to log into my servers as they use to log into the organisations systems.
- There is also some stuff about replication, as well as the referential integrity and attribute uniqueness overlays.
Comments