RHS 423

RHCSS module, Red Hat Enterprise Directory Services and Authentication (RHS423) is an intensive course designed to training Senior System Administrators the skills required to manage and deploy the Red Hat Directory Server on and for Red Hat Enterprise Linux systems. This course also covers cross-platform integration of directory services in order to provide authentication or information services across the enterprise. In addition, students will gain an understanding of the basic concepts, configuration, and management of LDAP-based services. This course also explores PAM, the Pluggable Authentication Modules system, and how it integrates with services that require authentication.

Course Outline:

Introduction to Directory Services

What is a directory? | LDAP: models, schema, and attributes | Object classes | LDIF

The LDAP Naming Model

Directory information trees and Distingued Names | X.500 and "Internet" naming suffixes | Planning the directory hierarchy

Red Hat Directory Server: Basic Configuration

Installation and setup of Red Hat Directory Server | Using the Red Hat Console | Using logging to monitor Red Hat Directory Server activity | Backing up and restoring the directory | Basic performance tuning with indexes

Searching and Modifying the LDAP Directory

Using command line utilities to search the directory | Search filter syntax | Updating the directory

Red Hat Directory Server: Authentication and Security

Configuring TLS security | Using access control instructions (ACI's) | ACI's and the Red Hat Console

Linux User Authentication with NSS and PAM

Understanding authentication and authorization | Name service switch (NSS) | Advanced pluggable authentication modules (PAM) configuration

Centralized User Authentication with LDAP

Central account management with LDAP | Using migration scripts to migrate existing data into an LDAP server | LDAP user authentication

Kerberos and LDAP

Introduction to Kerberos | Configuring the Kerberos key distribution center (KDC) and clients | Configuring LDAP to support Kerberos

Directory Referrals and Replication

Referrals and replication | Single master configuration | Multiple master configuration | Planning for directory server availability

Cross-Platform Centralized Identity Management

Synchronizing Red Hat Directory Server with Active Directory | Managing users with Winbind and LDAP | Mapping attributes between Linux and Windows