Changes between Version 43 and Version 44 of Internal/Rbac/LdapResources

Timestamp:

Apr 20, 2017, 5:18:20 AM (7 years ago)

Author:

msherman

Comment:

—

Internal/Rbac/LdapResources

@@ -1 +1 @@
 [[TOC(Internal/Rbac,Internal/Rbac/OrbitRbacLevels,Internal/Rbac/OrbitRbacDesign,Internal/Rbac/LdapResources,Internal/Rbac/RbacResources)]]
+== LDAP client / server implementation on ORBIT and WINLAB ==
+Current installation is migrating to: OpenLDAP server using TLS, and clients using SSSD and TLS. Replication is done via built in LDAP methods, also secured with TLS.
+Reference for setup: Guide: https://help.ubuntu.com/lts/serverguide/openldap-server.html
+
 == LDAP Resources ==
 ORBIT uses the open-source implementation of the The Lightweight Directory Access Protocol (LDAP) from [[http://www.openldap.org/ OpenLDAP]].  Many of the ideas about using LDAP to implement RBAC on ORBIT are from this site, see also [[http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/guide.pdf OpenLDAP Software 2.3 Administrator's Guide]].  There is also an O'Reilly book:  [[http://www.amazon.com/gp/product/1565924916/ Car03]] Gerald Carter. ''LDAP System Administration''. O'Reilly Media, Inc., Sebastopol, CA, USA, March 2003;  and an IBM Redbook:  [[http://orbit-lab.org/attachment/wiki/Internal/Rbac/RbacResources/sg244986.pdf TEGE04]] Steven Tuttle, Ami Ehlenberger, Ramakrishna Gorthi, Jay Leiserson, Richard Macbeth, Nathan Owen, Sunil Ranahandola, Michael Storrs, and Chunhui Yang. ''Understanding LDAP Desgn and Implementation''. IBM Redbook. IBM International Technical Support Organization, ibm.com/redbooks, second edition, June 2004.  The OpenLDAP site and guide and the two books each reference many more useful sites and documents.