Red Hat Enterprise Directory Services and Authentication

Prerequisites:

RH423 requires RHCE-level skills. A current RHCE certification is recommended but not required for this course. Prerequisite skills can be shown by passing the RHCE Exam in either RH302 or RH300, or by taking RH253 Red Hat Linux Networking and Security Administration or by possessing comparable skills and knowledge.

Course Description:

RH423 Red Hat Enterprise Directory Services and Authentication is an intensive course that provides four days of instruction and labs on cross-platform integration of directory services to provide authentication or information service across the enterprise using the Red Hat Directory Server.

This course includes the following modules:

Introduction to Directory Services

• What is a directory?
• LDAP: models, schema, and attributes
• Object classes
• LDIF

The LDAP Naming Model

• Directory information trees and Distingued Names
• X.500 and ?¢‚Äöá®?¨Internet naming suffixes
• Planning the directory hierarchy

Red Hat Directory Server: Basic Configuration

• Installation and setup of Red Hat Directory Server
• Using the Red Hat Console
• Using logging to monitor Red Hat Directory Server activity
• Backing up and restoring the directory
• Basic performance tuning with indexes

Searching and Modifying the LDAP Directory

• Using command line utilities to search the directory
• Search filter syntax
• Updating the directory

Red Hat Directory Server: Authentication and Security

• Configuring TLS security
• Using access control instructions (ACIs)
• ACIs and the Red Hat Console

Linux User Authentication with NSS and PAM

• Understanding authentication and authorization
• Name service switch (NSS)
• Advanced pluggable authentication modules (PAM) configuration

Centralized User Authentication with LDAP

• Central account management with LDAP
• Using migration scripts to migrate existing data into an LDAP server
• LDAP user authentication

Kerberos and LDAP

• Introduction to Kerberos
• Configuring the Kerberos key distribution center (KDC) and clients
• Configuring LDAP to support Kerberos Directory Referrals and Replication
• Referrals and replication
• Single master configuration
• Multiple master configuration
• Planning for directory server availability

Cross-Platform Centralized Identity Management

• Synchronizing Red Hat Directory Server with Active Directory
• Managing users with Winbind and LDAP
• Mapping attributes between Linux and Windows

Red Hat Enterprise IPA

• Understanding IPA
• IPA requirements
• Configuring IPA server
• Configuring IPA clients