TABLE OF CONTENTS Understanding LDAP and Directories
Understanding Microsoft Directory Services
Understanding OpenLDAP
Designing Linux-Based Directory Services
Summary
Solutions Fast Track
Frequently Asked Questions
Directory services form a crucial component for managing and cataloging objects such as user accounts and profile settings, groups, computers, printers, e-mail, and other network and infrastructure objects. Just as core network services are a prerequisite for directory services, directory services are a prerequisite (or a desirable integration point) for other network services such as authentication, messaging, and groupware services.
This chapter begins with an overview of directory services and Lightweight Directory Access Protocol (LDAP). The section covers LDAP fundamentals including Directory Information Tree (DIT) concepts, Distinguished Name (DN) convention, objectclasses, schema components, and other LDAP concepts. We also examine LDAP queries and connections.
Following the directory services overview, we explore Microsoft s directory services solutions. Microsoft s directory services changed considerably from Windows NT / Exchange 5.5 to Windows 2000. In Windows NT, the Security Accounts Manager (SAM) stores all user account information, and Exchange 5.5 provides extended contact and messaging information. In Windows 2000, both of these functions are combined into Active Directory (AD).
The next section examines OpenLDAP, the premier open source directory server. We examine features of the OpenLDAP suite including server daemons, client and server utilities, distributed directory services, and data import / export.
Directory services in a small company may consist of a single, non-dedicated server, whereas directory services in a larger company tend to be distributed, redundant, and...
