LDAP: Gabatarwa

Barka dai abokai !. Muna fara sabon jerin labaran da muke fatan zasu taimaka. Mun yanke shawarar rubuta su ga waɗanda suke son sanin abin da suke aiki da su, kuma su aiwatar da nasu ba tare da dogaro da software na mallaka ba, ko waɗanda suke da rabin kyauta da rabin kasuwanci.

Karatun da ake bukata shine OpenLDAP Software na 2.4 Jagoran Mai Gudanarwa. Haka ne, a cikin Turanci, saboda muna amfani da software da aka tsara kuma aka rubuta a cikin harshen Shakespeare. Also Muna kuma bada shawara sosai da karanta Jagorar Ubuntu Server 12.04., wanda muke bayarwa domin zazzagewa.

Takaddun bayanan da ake dasu yanzu cikin Turanci ne. Ban sami fassarar Sifaniyanci na ɗayan biyun da aka ba da shawarar a baya ba.

Duk abin da aka rubuta a cikin wannan gabatarwar an ɗauke shi daga Wikipedia ko kuma an fassara shi da yardar kaina cikin Mutanen Espanya daga takardun da aka ambata a sama.

Za mu gani:

• Bayani a taƙaice
• LDAP Maɓallan Maɓalli daga Hannun Mai Amfani
• Yaushe yakamata muyi amfani da LDAP?
• Yaushe bai kamata muyi amfani da LDAP ba?
• Waɗanne ayyuka da software muke shirin girkawa da daidaitawa?

Bayani a taƙaice

Daga Wikipedia:

LDAP shine takaddama don Yarjejeniyar Shiga Hanyar Shiga Ruwa, wanda ke nufin yarjejeniya a matakin aikace-aikacen da ke ba da damar isa ga sabis ɗin umarnin da aka ba da umarni da rarraba don bincika bayanai daban-daban a cikin hanyar sadarwa. Hakanan ana ɗaukar LDAP a matsayin matattarar bayanai (duk da cewa tsarin ajiyar sa na iya zama daban) wanda za'a iya tambaya.

Littafin adireshi jerin abubuwa ne tare da sifofin da aka tsara ta hanya mai ma'ana da tsari. Misali mafi yawa shine kundin adireshi na tarho, wanda ya ƙunshi jerin sunaye (mutane ko ƙungiyoyi) waɗanda aka tsara su a haruffa, tare da kowane suna da adireshi da lambar tarho a haɗe da shi. Don ƙarin fahimta, littafi ne ko babban fayil, wanda a ciki ake rubuta sunayen mutane, lambobin tarho da adiresoshinsu, kuma ana tsara su baƙaƙe.

Itace jagorar LDAP wani lokacin tana nuna banbancin siyasa, yanki, ko iyakokin kungiya, ya danganta da tsarin da aka zaba. Deploaddamarwar LDAP na yanzu tana amfani da sunayen Sunan Tsarin Yanayi (DNS) don tsara manyan matakan matsayi. Yayin da kake gungura ƙasa da kundin adireshi, shigarwar na iya bayyana waɗanda ke wakiltar mutane, ƙungiyoyin ƙungiya, masu buga takardu, takardu, ƙungiyoyin mutane, ko wani abu da yake wakiltar shigar da aka bayar a itacen (ko shigarwar da yawa).

Yawancin lokaci, yana adana bayanan tabbatarwa (mai amfani da kalmar wucewa) kuma ana amfani dashi don tantancewa, kodayake yana yiwuwa a adana wasu bayanan (bayanan mai amfani da mai amfani, wurin da albarkatun cibiyar sadarwa daban-daban, izini, takaddun shaida, da sauransu). A taƙaice, LDAP yarjejeniya ce ta samun haɗin kai zuwa saitin bayanai akan hanyar sadarwa.

Sigar ta yanzu ita ce LDAPv3, kuma an bayyana ta a cikin RFCs RFC 2251 da RFC 2256 (LDAP base document), RFC 2829 (hanyar tabbatarwa ga LDAP), RFC 2830 (ƙarin don TLS), da RFC 3377 (ƙwarewar fasaha).

Wasu aiwatarwar LDAP:

Active Directory: shine sunan da Microsoft ke amfani da shi (tun daga Windows 2000) azaman kantin sayar da bayanai na ɗaya daga cikin yankunan gudanarwa. Sabis ɗin Directory yanki ne na tsari na bayanai game da abubuwa daban-daban waɗanda Littafin Aiki ya ƙunsa, a wannan yanayin suna iya zama firintocinku, masu amfani, kwamfutoci ... Yana amfani da ladabi daban-daban (galibi, LDAP, DNS, DHCP, Kerberos...).

A karkashin wannan sunan akwai ainihin makirci (ma'anar filayen da za'a iya tuntuba) LDAP version 3, wanda ke ba da damar haɗa sauran tsarin da ke tallafawa yarjejeniya. Wannan LDAP yana adana bayanai game da masu amfani, albarkatun cibiyar sadarwa, manufofin tsaro, daidaitawa, sanya izini, da dai sauransu.

Sabis ɗin Adireshin NovellHakanan an san shi da suna eDirectory, shi ne aiwatar da Nuwamba wanda ake amfani dashi don sarrafa damar samun albarkatu akan sabobin daban-daban da kwamfutoci akan hanyar sadarwa. Asali an kirkireshi ne bisa tsarin tsari da daidaitaccen abu, wanda yake wakiltar kowane sabar, computer, firintar, sabis, mutane, da dai sauransu. Tsakanin wane izinin ne don ikon sarrafawa aka ƙirƙira shi, ta hanyar gado. Amfanin wannan aiwatarwar shine yana gudana akan dandamali da yawa, don haka ana iya sauƙaƙa shi da sauƙi zuwa yanayin da ke amfani da tsarin aiki sama da ɗaya.

Shine mai gabatarwa dangane da tsarin Directory, kamar yadda aka gabatar dashi a shekarar 1990 tare da nau’in Novell Netware 4.0. Kodayake AD na Microsoft ya girma cikin shahara, har yanzu ba zai iya daidaita da aminci da ingancin eDirectory da ikonsa na Cross-Platform ba.

OpenLDAP: Aiwatarwa ne na ladabi wanda ke tallafawa ƙirar makirci da yawa don haka ana iya amfani dashi don haɗawa da kowane LDAP. Yana da nasa lasisin, OpenLDAP Lasisin Jama'a. Kasancewa yarjejeniya mai zaman kanta ta dandamali, yawancin rarraba GNU / Linux da BSD sun haɗa da shi, kamar AIX, HP-UX, Mac OS X, Solaris, Windows (2000 / XP), da z / OS.

OpenLDAP yana da manyan abubuwa guda huɗu:

• slapd - tsayayyen LDAP daemon.
• slurpd - Standalone LDAP sabunta sabuntawar daemon.
• Yarjejeniyar LDAP tana tallafawa ayyukan ɗakin karatu
• Kayan aiki, kayan aiki da abokan ciniki.

LDAP Maɓallan Maɓalli daga Hannun Mai Amfani

Wani irin bayani za mu iya ajiyewa a cikin Littafin Adireshi?. Samfurin bayani a cikin kundin adireshin LDAP ya dogara ne akan tikiti. Shiga ciki tarin halaye ne waɗanda ke da Rarraba Sunan guda ɗaya ko "Fitaccen Sunan (DN)". Ana amfani da DN don komawa zuwa shigowar musamman.

Kowane sifa na shigarwa yana da kirki kuma daya ko fiye dabi'u. Nau'ikan galibi suna da kirtani kamar cn o "Suna na gama gari" don sunaye gama gari, ko email don adiresoshin imel. Aikace-aikace na dabi'u ya dogara da nau'in sifa.

Misali, sifa ce cn iya ƙunsar ƙimar Bagins Frodo. Sifa email iya samun ƙarfin hali frodobagins@amigos.cu. Sifa Tsakar Gida iya ƙunsar hoto a cikin tsari na binary JPEG.

Yaya aka tsara bayanin?. A cikin LDAP, shigar da kundin adireshi a cikin tsarin tsari a cikin hanyar itacen da aka juyar da shi. A al'adance, wannan tsarin yana nuna yanki ko / ko iyakokin kungiya ko iyaka.

Abubuwan da ke wakiltar ƙasashe sun bayyana a saman bishiyar. A ƙasa da su akwai shigarwar da ke wakiltar jihohi da ƙungiyoyin ƙasa.

Sannan akwai abubuwan shigarwa waɗanda ke wakiltar rukunin ƙungiyoyi, mutane, firintocinku, takardu, ko duk wani abin da muke iya tunani.

Adadin da ke ƙasa shine misalin bishiyar LDAP wacce ake amfani da sunayen gargajiya.

LDAP yana ba da izinin sarrafa waɗanne halayen halayen da muke buƙata don shigarwa ta amfani da sifa ta musamman da ake kira abuClass. Darajar sifa abuClass kayyade da Dokokin Makirci o Dokokin tsari cewa shigar dole ne yayi biyayya.

Ta yaya za mu yi amfani da bayanin?. Muna komawa ga shigarwa ta hanyar Sunan ta na oraya ko Sunan Masanin, wanda aka gina shi daga sunan shigar da kansa (wanda ake kira Bambancin Sunan Dangi ko Dangi Sunan Bambanci o DAM), an haɗa shi da sunan shigar da kakanninta ko kakanninsu.

Misali, a cikin adon da ke sama shigar Frodo Bagins yana da DAM cn = Frodo Bagins da kuma DN cikakke ne cn = Frodo Bagins, ou = Zobba, o = Abokai, st = Havana, c = cu.

Ta yaya muke samun damar bayanin?. LDAP ta bayyana ayyukan da ake buƙata don yin tambayoyi da sabunta kundin adireshin. Waɗannan sun haɗa da ayyukan ƙarawa da share shigarwa, gyaggyara shigarwar data kasance, da canza sunan shigarwa.

Koyaya, mafi yawan lokuta LDAP ana amfani dashi don bincika bayanan da aka adana a cikin kundin adireshin. Ayyukan bincike suna ba da izinin ɓangaren kundin adireshin don bincika shigarwar waɗanda suka cika wasu sharuɗɗan da aka ƙayyade a cikin matattarar binciken. Ta waccan hanyar zamu iya bincika kowace shigarwa wacce ta cika ƙa'idodin bincike.

Ta yaya zamu kiyaye bayanai daga samun izini mara izini?. Wasu sabis ɗin kundin adireshi basu da kariya kuma suna bawa kowa damar duba bayananka.

LDAP tana samar da wata hanya don kwastomomi don tantancewa, ko tabbatar da asalin su ga sabis na kundin adireshi, don tabbatar da ikon samun damar kare bayanan da sabar ta ƙunsa.

LDAP kuma yana tallafawa sabis na tsaro na bayanai, duka game da mutunci da tsare sirri.

Yaushe yakamata muyi amfani da LDAP?

Wannan tambaya ce mai kyau. Gabaɗaya, yakamata muyi amfani da Sabis ɗin Adireshin lokacin da muke buƙatar bayanai don adanawa da sarrafa su a cikin tsakiya, da kuma samun dama ta hanyar ingantattun hanyoyin.

Wasu misalai na nau'in bayanin da muke samu a cikin kasuwancin kasuwanci da yanayin masana'antu:

• Inganta Injin
• Tabbatar da Mai amfani
• Masu amfani da tsarin da Kungiyoyi
• Littafin adireshi
• Wakilan Kungiya
• Bibiyar kayan aiki
• Gidan Bayanai Na Waya
• Gudanar da Amfani da Mai amfani
• Binciken Adireshin Imel
• Shagon Kan Kan Aikace-aikace
• PBX Wayar Gidan Gidan Waya tarho
• da dai sauransu…

Akwai fayilolin Tsarin Rarraba da yawa -Rarraba Fayilolin Schemas- tushen-matsayin. Koyaya, koyaushe muna iya ƙirƙirar takamaiman tsarinmu ... lokacin da muke Kwararrun LDAP. 🙂

Yaushe bai kamata muyi amfani da LDAP ba?

Lokacin da muka gane cewa muna karkatawa ko kuma tilasta LDAP ɗinmu don yin abin da muke buƙata. A wannan yanayin, yana iya buƙatar sake tsara shi. Ko kuma idan muna buƙatar aikace-aikace guda ɗaya don amfani da sarrafa bayanan mu.

Waɗanne ayyuka da software muke shirin girkawa da daidaitawa?

• Directory Service ko Sabis na Adireshin dangane da OpenLDAP
• sabis NTP, DNS y DHCP mai zaman kansa
• Haɗa Samba zuwa LDAP
• Yiwuwar zamu haɓaka haɗin LDAP y Kerberos
• Sarrafa Littafin Adireshi tare da aikin yanar gizo Manajan Asusun Ldap.

Kuma wannan shine yau, abokai!

Sources tuntuba:

• https://wiki.debian.org/LDAP
• OpenLDAP Software na 2.4 Jagoran Mai Gudanarwa
• Ubuntu 12.04 jagorar uwar garke