LDAP

O LDAP (Lightweight Directory Access Protocol) é um serviço de directório mais frequentemente usado para suporte a autenticação centralizada.

...

Passos obrigatórios

Não esquecer de indexar a base de dados LDAP com o comando slapindex após adicionar um índice, caso contrário as pesquisas não retornarão resultados para os dados que já se encontravam na base de dados.

Referências

Configuração

• https://wiki.samba.org/index.php/2.0:_Configuring_LDAP
• https://wiki.archlinux.org/title/OpenLDAP#Configuration
• https://docs.debops.org/en/master/ansible/roles/ldap/ldap-posix.html
• https://tech.wrighting.org/2016/05/16/openldap-some-installation-tips/ (contém dicas de integração com PAM)

Geral

• http://ldapman.org/

Índices

• https://www.openldap.net/faq/data/cache/136.html

Multi-tenancy

• https://opensource.hcltechsw.com/connections-doc/v65/mt_dependencies/settingup_open_ldap_mt.html
• https://documentfault.wordpress.com/2015/08/30/openldap-with-multiple-domains/

MemberOf

• https://www.adimian.com/blog/how-to-enable-memberof-using-openldap/
• https://tylersguides.com/guides/openldap-memberof-overlay/
• https://technicalnotes.wordpress.com/2014/04/19/openldap-setup-with-memberof-overlay/

PPolicy

• https://www.linux.com/training-tutorials/openldap-ppolicy-overlay-user-authentication/
• http://www.zytrax.com/books/ldap/ch6/ppolicy.html

Proxy

• https://www.openldap.org/faq/data/cache/532.html
• https://stackoverflow.com/questions/58432331/configuring-ldap-proxy-server-with-multiple-ad-ldap-servers

Replicação

• https://tylersguides.com/guides/openldap-multi-master-replication/

Segurança

• https://www.opensourceforu.com/2010/03/openldap-part-2-adding-basic-security-measures/
• https://openldap.org/doc/admin24/access-control.html
• https://openldap.org/doc/admin24/security.html
• https://www.openldap.org/faq/data/cache/429.html

TLS

• https://www.lisenet.com/2014/install-and-configure-an-openldap-server-with-ssl-on-debian-wheezy/

Não categorizados

• https://tools.ietf.org/id/draft-stroeder-hashed-userpassword-values-01.html
• http://ldapwiki.com/wiki/GroupOfUniqueNames%20vs%20groupOfNames
• http://www.openldap.org/faq/data/cache/182.html
• http://www.zytrax.com/books/ldap/ape/
• https://www.openldap.org/lists/openldap-software/200308/msg00698.html
• https://serverfault.com/questions/620482/openldap-gives-duplicate-attributetype-error
• https://help.ubuntu.com/community/OpenLDAPServer
• https://ubuntuforums.org/showthread.php?t=1787991
• https://serverfault.com/questions/531495/why-does-this-ldapadd-command-quit-with-an-invalid-syntax-error
• https://www.thegeekstuff.com/2015/01/openldap-linux/
• https://stackoverflow.com/questions/18756688/what-are-cn-ou-dc-in-an-ldap-search
• https://stackoverflow.com/questions/7250037/ldif-for-creating-active-directory-users-and-groups-in-openldap
• https://www.thegeekstuff.com/2015/02/openldap-add-users-groups/
• http://www.zytrax.com/books/ldap/ch11/groups.html
• http://vaab.blog.kal.fr/2010/03/06/how-to-add-a-schema-in-openldap-24/
• https://docs.oracle.com/cd/E52668_01/E54669/html/ol7-s12-auth.html
• https://serverfault.com/questions/132026/listing-group-members-using-ldapsearch
• (importante) https://wiki.gentoo.org/wiki/Centralized_authentication_using_OpenLDAP
• https://www.systutorials.com/39544/unified-linux-login-and-home-directory-using-openldap-and-nfsautomount/
• http://www.geekpills.com/operating-system/linux/autofs-for-home-folder-in-openldap-schema-for-roaming-users
• https://arkit.co.in/ldap-client-configuration/
• https://wiki.debian.org/LDAP/AutoFSSetup
• https://docs.oracle.com/cd/E19693-01/819-0995/bcacx/index.html
• https://www.openldap.org/lists/openldap-software/200901/msg00044.html
• https://stackoverflow.com/questions/22351727/simple-method-for-populating-an-ldap-database
• https://waqarafridi.wordpress.com/2018/01/16/configuring-and-installing-openldap-and-populating-it-from-a-csv-file/
• https://ubuntu.com/server/docs/service-ldap
• http://manpages.ubuntu.com/manpages/focal/en/man5/slapd.access.5.html
• https://serverfault.com/questions/451869/ldap-modify-insufficient-access-50