Curso de: Objetivos: LDAP Iniciación y aprendizaje de todo el entorno y filosofía al Protocolo de Acceso a Directorios Ligeros. Conocer su estructura de árbol de almacenamiento. Destinado a: Todos los Informáticos de sistemas. Modalidad: presencial Plazas: 15 Documentación: En formato pdf Requisitos: Tutorías: Acreditación: A aportar: 2 horas Certificación acreditativa Revisión 1. 2014 Página 1 de 5
Contenido del Curso: Part 1 Fundamental LDAP concepts 1 Introduction to LDAP 1.1 What LDAP is Directory services and directory servers LDAP and directory services Other directory services 1.2 What LDAP is not LDAP is not a relational database LDAP is not a file system for very large objects LDAP is not optimal for very dynamic objects LDAP is not useful without applications 1.3 Current applications White pages Authentication and authorization Personalization Roaming profiles Public Key Infrastructure Message delivery 1.4 Brief history X.500 and DAP A new standard is born LDAP goes solo LDAPv3 1.5 LDAP revisions and other standards Replication and access control 19 Directory Enabled Networking XML and directories 1.6 Directory management 1.7 Directory integration Integration via metadirectories 1.8 Integration and federation via virtual directory technology 1.9 Why this book? 1.10 Summary 2 Understanding the LDAP information model 2.1 Information model overview Entries Attributes LDAP entries vs. database records 2.2 Working with LDAP schema Standard LDAP schema 2.3 Attribute types Defining attribute types Syntax definitions Matching rules for attributes Support for multiple values Inheritance User modification Variables in Java, Perl, and C 2.4 Object classes Defining object classes Required and allowed attributes Object class inheritance Multiple object class memberships Object class types LDAP object classes and Java or C++ classes 2.5 Using object modeling to design LDAP schema Modeling classes Modeling relationships Modeling object instances 2.6 Summary 3 Exploring the LDAP namespace 3.1 What is a namespace? Hierarchical namespaces 3.2 Specifying distinguished names Choosing a relative distinguished name attribute Determining the base 3.3 Assigning the root naming context Traditional style of assigning the root name context Domain component style of assigning the root name context 3.4 Selecting and designing a directory tree Intranet directories Internet directories Extranet directories 3.5 Summary 4 Search criteria 4.1 Performing a search 4.2 Where to search: base and scope Search base Search scope 4.3 What to evaluate: search filters Presence filters Exact equality filters Substring matching Revisión 1. 2014 Página 2 de 5
Ordered matching (greater than/less than) Approximate filters Multiple filters: AND and OR operators Negative filters: the NOT operator Extensible searching and matching rules 4.4 What to return: the attribute return list 4.5 LDAP search criteria vs. SQL queries Similarities between SQL SELECT and LDAP search criteria Differences between SQL SELECT and LDAP search criteria 4.6 Increasing search performance 4.7 Summary 5 Exchanging directory information 5.1 Representing directory information outside the directory 5.2 LDAP Data Interchange Format Expressing entries in basic LDIF Writing LDAP changes as LDIF Representing schemas in LDIF Advantages and disadvantages of LDIF 5.3 Directory Services Markup Language Why use DSML? Getting started with DSML A DSML example Handling binary values in DSML entries Entry changes and DSML 5.4 Defining directory schemas with DSML DSML object classes 5.5 XSLT and DSML Converting DSML to HTML using XSLT 5.6 Summary Part 2 LDAP management DSML attribute types 6 Accessing LDAP directories with Perl 6.1 LDAP access from Perl 6.2 Getting started with Net::LDAP Using the module Opening a connection Binding to the directory 6.3 Searching with Net::LDAP Performing a search Understanding search scopes LDAP search filters Using search results Limiting attribute retrieval Handling referrals 6.4 Manipulating entries Updating an entry Adding new entries Deleting an entry Renaming an entry 6.5 Comparing entries 6.6 Handling errors 6.7 Support for encrypted/ssl connections 6.8 Summary 7 Managing directory entries, groups, and accounts 7.1 Common types of managed entries 7.2 Entry management models Centralized administration Distributed administration User self-administration/self-service 7.3 Creating people entries People entries via a web form People entries based on existing data Summary of creating entries 7.4 Creating and maintaining groups Explicit groups Dynamic groups and LDAP URLs 7.5 Representing and managing account information Unix user accounts Linking Unix accounts to people 7.6 Managing other information Security services information DNS information Directory Enabled Networking information Card catalog information 7.7 Summary 8 Synchronizing LDAP information 8.1 Approaches to data flow management Replication File export/import Scripting 8.2 Data flow analysis Revisión 1. 2014 Página 3 de 5
Schema mapping Determining the authoritative source Data transformation Namespace translation 8.3 Interchange formats LDAP Data Interchange Format Directory Services Markup Language 8.4 Migration to LDAP Migrating a simple table Migrating from multiple sources Adding new information to existing entries 8.5 Joining related information Multikey matches Fuzzy matching 8.6 Synchronization Synchronization to LDAP Synchronization from LDAP Bidirectional synchronization 8.7 Summary 9 Accessing operational information in LDAP 9.1 Getting server information Retrieving available root naming contexts 169 Extracting object class information Getting attribute type details 9.2 Monitoring with LDAP Getting the monitor s name Reading the monitor information Polling the monitor entry 9.3 Testing replication 9.4 Summary 10 DSML: getting under the hood 10.1 DSML parsing with SAX Basics of parsing XML with SAX A simple XML parser handler Parsing a simple document PerlSAX s built-in error checking 10.2 Parsing DSML into a Perl object Beginnings of a useful DSML parser handler Handling elements in the DSML file Extracting characters between start and end tags Preparing to use DSMLHandler Invoking the SAX parser using DSMLHandler 10.3 Generating DSML Writing directory entries Converting RFC-style LDAP schemas to DSML LDAP schemas Conversion example for object classes Converting attribute types 10.4 Using Perl to convert DSML with XSLT Converting DSML to HTML 10.5 Summary Part 3 Application integration 11 Accessing LDAP directories with JNDI 11.1 Introduction to JNDI JNDI versus the LDAP Java SDK 11.2 JNDI architecture JNDI providers The JNDI package 11.3 JNDI operations: the DirContext class Handling basic exceptions Closing the connection Binding to the directory A reusable LDAP connection handler 11.4 Searching with JNDI Abstracting the entry A search class 11.5 Adding entries 226 A simple add example A generalized add example 11.6 Manipulating entries Modifying entries Deleting entries Renaming entries 11.7 Summary 12 Java programming with DSML 12.1 Writing DSML with Java 12.2 DSML with JNDI Automatic DSML output from LDAP URLs 12.3 Working with schemas in DSML Revisión 1. 2014 Página 4 de 5
Reading schemas with SAX Designing a basic SAX handler 12.4 Transformation with XSLT in Java 12.5 Enhancements with DSMLv2 Implementing interapplication communication Creating DSMLv2 SOAP requests Creating DSMLv2 SOAP requests with JNDI 12.6 Summary 13 Application security and directory services 13.1 The relationship between security and directories What is security? How LDAP provides security 13.2 Storing key and certificate data Preshared secret keys Public/private key pairs 13.3 Using digital certificates Creating a digital certificate in Java Storing and distributing digital certificates 13.4 Managing authorization information Understanding access control rules Directory authorization Application authorization 13.5 Encrypting LDAP sessions using JNDI and SSL 13.6 Summary A: Standard schema reference B: PerLDAP Revisión 1. 2014 Página 5 de 5