I-LDAP: Intshayelelo

Molweni zihlobo! Siqala uthotho olutsha lwamanqaku esithemba ukuba aya kuba luncedo. Sithathe isigqibo sokuba sibabhalele abo bathanda ukwazi ukuba basebenzisana nantoni, kwaye benze olwabo uphumezo ngaphandle kokuxhomekeka kwisoftware ephetheyo ngokupheleleyo, okanye ezo zingasimahla nesiqingatha sentengiso.

Ukufundwa okufunekayo yi Isikhokelo soMlawuli se-OpenLDAP 2.4. Ewe, ngesiNgesi, kuba sisebenzisa isoftware eyilwe kwaye yabhalwa ngolwimi lweShakespeare. Sikwacebisa ukuba sifunde IsiKhokelo seseva ye-Ubuntu 12.04., Esithi siyinike ukhuphelo.

Amaxwebhu akhoyo ngesiNgesi. Andifumananga kuguqulwa kweSpanish kwezi zimbini zicetyiswe ngaphambili.

Yonke into ebhaliweyo kule ntetho ithathwa kwiWikipedia okanye iguqulelwe ngokukhululekileyo kwiSpanish isuka kumaxwebhu achazwe apha ngasentla.

Siza kubona:

• Isishwankathelo inkcazo
• Iimpawu eziphambili ze-LDAP ezivela kuMboniso woMsebenzisi
• Sifanele siyisebenzise nini i-LDAP?
• Sifanele ukusebenzisa nini i-LDAP?
• Zeziphi iinkonzo kunye nesoftware esiceba ukuyifaka kunye nokumisela?

Isishwankathelo inkcazo

Isuka kwiWikipedia:

I-LDAP sisifinyezo seProtocol yokuFikelela kuLwazi oluKhaphukhaphu, esibhekisa kwiprotocol kwinqanaba lesicelo elvumela ukufikelela kwinkonzo yolawulo kunye nokusasazwa ukukhangela ulwazi olwahlukileyo kwimeko yenethiwekhi. I-LDAP ikwajongwa njengesiseko sedatha (nangona inkqubo yogcino isenokwahluka) enokubuzwa.

Isikhokelo siseti yezinto ezineempawu ezilungelelaniswe ngendlela enengqiqo kunye nokulandelelana. Owona mzekelo uqhelekileyo sisikhombisi sefowuni, esiqulathe uluhlu lwamagama (abantu okanye imibutho) ecwangciswe ngokwe-alfabhethi, igama ngalinye linedilesi kunye nenombolo yomnxeba eqhotyoshelwe kuyo. Ukuqonda ngcono, yincwadi okanye ifolda, ekubhalwe kuyo amagama abantu, iinombolo zomnxeba kunye needilesi, kwaye icwangciswe ngokwe-alfabhethi.

Umthi wesikhokelo we-LDAP ngamanye amaxesha ubonakalisa imida eyahlukeneyo yezopolitiko, yejografi, okanye yombutho, kuxhomekeke kwimodeli ekhethiweyo. Ukuhanjiswa kwangoku kwe-LDAP kuhlala kuthanda ukusebenzisa amagama eDomain Name System (DNS) amagama ukwenza amanqanaba aphezulu kolawulo. Njengoko uskrolela ezantsi isikhombisi, amangenelo anokuvela amele abantu, iiyunithi zombutho, abashicileli, amaxwebhu, amaqela abantu, okanye nantoni na emele ungeniso olunikiweyo emthini (okanye amangenelo amaninzi).

Ngokwesiqhelo, igcina ulwazi lokungqinisisa (igama lomsebenzisi kunye negama lokugqitha) kwaye isetyenziselwa ukungqinisisa, nangona kunokwenzeka ukugcina olunye ulwazi (iinkcukacha zonxibelelwano zomsebenzisi, indawo yezixhobo zonxibelelwano ezahlukeneyo, iimvume, izatifikethi, njl. Isishwankathelo, i-LDAP yinkqubo yokufikelela emanyeneyo kwiseti yolwazi kwinethiwekhi.

Inguqulelo yangoku yi-LDAPv3, kwaye ichaziwe kwi-RFCs RFC 2251 kunye ne-RFC 2256 (uxwebhu olusisiseko lwe-LDAP), i-RFC 2829 (indlela yokuqinisekisa ye-LDAP), i-RFC 2830 (ulwandiso lwe-TLS), kunye ne-RFC 3377 (imigaqo yobuchwephesha).

Olunye uphumezo lwe-LDAP:

Active Directory: ligama elisetyenziswa nguMicrosoft (ukusukela ngeWindows 2000) njengendawo yokugcina ulwazi kwindawo enye yolawulo lwayo. Inkonzo yesikhokelo yindawo yokugcina ulwazi kwizinto ezahlukeneyo eziqulethwe kwi-Active Directory, kule meko banokuba ngabashicileli, abasebenzisi, iikhomputha ... Isebenzisa iiprotokholi ezahlukeneyo (ikakhulu, I-LDAP, iDNS, iDHCP, iKerberos...).

Ngaphantsi kweli gama kukho ischema (inkcazo yamasimi anokubonwa) inguqulelo yesi-3 ye-LDAP, evumela ukudityaniswa kwezinye iinkqubo ezixhasa umthetho olandelwayo. Le LDAP igcina ulwazi kubasebenzisi, izixhobo zenethiwekhi, imigaqo-nkqubo yezokhuseleko, ukumisela, ukunikezelwa kwemvume, njl.

Iinkonzo zeNoveliIkwabizwa ngokuba yi-eDirectory, kukuphunyezwa kwe-Novell esetyenziselwa ukulawula ukufikelela kwizibonelelo kwiiseva ezahlukeneyo nakwiikhompyuter kwinethiwekhi. Yenziwe ngokusekwe kwindawo yedatha kunye nezinto ezijolise kwinto, emele iserver nganye, ikhompyuter, iprinta, inkonzo, abantu, njl. Phakathi kweziphi iimvume zolawulo lofikelelo ezenziweyo, ngelifa. Uncedo loku kumiliselwa kukuba lihamba kumaqonga amaninzi, ke linokutshintshwa ngokulula libe kwimeko ezisebenzisa ngaphezulu kwenkqubo enye yokusebenza.

Ingumhambeli phambili kulawulo lwezakhiwo, njengoko yaziswa ngo-1990 ngohlobo lweNovell Netware 4.0. Nangona i-AD ye-Microsoft ikhule ngokuthandwa, ayisakwazi ukuthelekisa ukuthembeka kunye nomgangatho we-eDirectory kunye namandla ayo oMnqamlezo.

VulaLDAPKukumiliselwa simahla komgaqo olandelwayo oxhasa izikimu ezininzi ukuze usetyenziselwe ukunxibelelana nayo nayiphi na enye i-LDAP. Inelayisensi yayo, iLayisensi yoLuntu ye-OpenLDAP. Ukuba ngumgaqo-nkqubo ozimeleyo weqonga, ukusasazwa kwe-GNU / Linux kunye ne-BSD kubandakanya, njenge-AIX, i-HP-UX, iMac OS X, iSolaris, iWindows (2000 / XP), kunye ne-z / OS.

I-OpenLDAP inezinto ezine eziphambili:

• I-slapd-ezimeleyo yedemon ye-LDAP.
• I-slurpd-emileyo ye-LDAP yokuhlaziya ukuphindaphinda idemon.
• Inkqubo ye-LDAP protocol yenkxaso yelayibrari
• Izixhobo, izixhobo kunye nabaxumi.

Iimpawu eziphambili ze-LDAP ezivela kuMboniso woMsebenzisi

Loluphi uhlobo lolwazi esinokulugcina kulawulo?. Imodeli yolwazi kulawulo lwe-LDAP isekwe kwi amathikiti. Ungeniso yingqokelela yeempawu ezinegama elinye eliKhethekileyo okanye "iGama eliKhethekileyo (DN)". I-DN isetyenziselwa ukubhekisa ekungeneni ngokukodwa.

Uphawu ngalunye lokungena lune uhlobo kwaye enye okanye ezingaphezulu xabiso. Iindidi ziqhelekileyo imitya ye-mnemonic efana cn o "Igama eliqhelekileyo" lamagama aqhelekileyo, okanye Ngeposi Kwiidilesi ze-imeyile. I-syntax yexabiso ixhomekeke kuhlobo lophawu.

Umzekelo, uphawu cn inokuqulatha ixabiso le Iingxowa zeFrodo. Uphawu Ngeposi ungaba nesibindi frodobagins@amigos.cu. Uphawu Ifoto Inokuba nefoto kwifomathi yokubini JPEG.

Lulungelelaniswe njani ulwazi?. Kwi-LDAP, ungeniso lolawulo luququzelelwe kulwakhiwo lobume ngohlobo lomthi oguqulweyo. Ngokwesiko, olu lwakhiwo lubonakalisa ubume bemo kunye / okanye imida yombutho okanye imida.

Amangenelo amele amazwe abonakala phezulu emthini. Apha ngezantsi kuya kubakho amangeniso amele amazwe kunye nemibutho yesizwe.

Emva koko kunokubakho amangeniso abonisa iiyunithi zombutho, abantu, abashicileli, amaxwebhu, okanye enye into esikwaziyo ukuyicinga.

Lo mzobo ungezantsi ngumzekelo womthi wolawulo lwe-LDAP apho kusetyenziswa amagama emveli.

I-LDAP ivumela ulawulo lweempawu esizifunayo xa singena ngokusebenzisa uphawu oluthile olubizwa ngokuba objectClass. Ixabiso lophawu objectClass Igqiba i Imigaqo yoXNUMXbutho o Imigaqo yeQhinga igalelo kufuneka lithobele.

Silubhekisa njani ulwazi?. Sibhekisa ekungeneni ngegama eliDumileyo okanye Igama elidumileyo, Eyakhelwe kwigama lokungena ngokwalo (elibizwa ngegama eliDumileyo loLwalamano okanye Igama eliDumileyo o I-RDN), edityaniswe negama lokungeniswa kookhokho okanye ookhokho.

Umzekelo, kulo mzobo ungasentla ungeniso iFrodo Bagins ine I-RDN cn = Iingxowa zeFrodo kunye nayo DN igqityiwe cn = Frodo Bagins, ou = Imisesane, o = Abahlobo, st = Havana, c = cu.

Silufikelela njani olu lwazi?. I-LDAP ichaze imisebenzi eyimfuneko ukubuza imibuzo kunye nokuhlaziya umkhombandlela. Oku kubandakanya imisebenzi yokongeza nokucima ungeno, ukuguqula ungeno esele lukhona, kunye nokufaka kwakhona igama.

Nangona kunjalo, ixesha elininzi le-LDAP lisetyenziselwa ukukhangela ulwazi olugcinwe kulawulo. Imisebenzi yokukhangela ivumela icandelo lesikhangeli ukuba likhangelo kumangenelo ahlangabezana neendlela ezithile ezichaziweyo kwisihluzi sokukhangela. Ngale ndlela sinokukhangela ungeno ngalunye oluhlangabezanayo neenqobo zokukhangela.

Silukhusela njani ulwazi kufikelelo olungagunyaziswanga?. Ezinye iinkonzo zesikhombisi azikhuselekanga kwaye zivumela nabani na ukuba ajonge ulwazi lwakho.

I-LDAP ibonelela ngendlela yabathengi yokuqinisekisa, okanye yokuqinisekisa isazisi sabo kwinkonzo yolawulo, ukuze kuqinisekiswe ulawulo lokufikelela ukukhusela ulwazi oluneseva.

I-LDAP ikwaxhasa iinkonzo zokhuseleko lwedatha, kokubini malunga nokuthembeka kunye nokugcinwa kwemfihlo.

Sifanele siyisebenzise nini i-LDAP?

Lo ngumbuzo olunge kakhulu. Ngokubanzi, kuya kufuneka sisebenzise iNkonzo yeeNkcukacha xa sifuna ulwazi oluza kugcinwa kwaye lilawulwe embindini, kunye nokufikeleleka ngeendlela ezisekwe kwimigangatho.

Eminye imizekelo yohlobo lolwazi esilufumanayo kwishishini nakwimeko yendawo yoshishino:

• Uqinisekiso loMatshini
• Ukuqinisekiswa komsebenzisi
• Abasebenzisi beNkqubo kunye namaQela
• Incwadi yedilesi
• Ukumelwa kombutho
• UkuKhangelwa kwezixhobo
• Indawo yokugcina ulwazi ngefowuni
• Ulawulo lweZibonelelo zoMsebenzisi
• Ukukhangela idilesi ye-imeyile
• Ivenkile yoqwalaselo lwesicelo
• I-PBX yeefowuni zoCwangciso lweZityalo
• njl ...

Zininzi iiFayile zeSkimu eziHanjisiweyoIifayile zeSchemas ezihanjisiweyo- esekwe kwimigangatho. Nangona kunjalo, singasoloko siyila eyethu i-Schema Specification ... xa siziingcali ze-LDAP. 🙂

Sifanele ukusebenzisa nini i-LDAP?

Xa siqonda ukuba singabo ukujija okanye ngokunyanzela i-LDAP yethu ukuba yenze oko sikufunayo. Kwimeko apho, inokufuna ukuba iphinde ihlelwe kwakhona. Okanye ukuba sifuna usetyenziso olunye lokusebenzisa kunye nokukhohlisa idatha yethu.

Zeziphi iinkonzo kunye nesoftware esiceba ukuyifaka kunye nokumisela?

• Inkonzo yoLawulo okanye Inkonzo yoLawulo esekwe VulaLDAP
• Ngathi NTP, DNS y DHCP ezizimeleyo
• Hlanganisa Samba ukuya kwi-LDAP
• Ngokunokwenzeka siya kuphuhlisa ukuhlanganiswa kwe- I-LDAP y IKerberos
• Lawula i-Directory kunye nesicelo sewebhu Umphathi weAkhawunti yeLdap.

Kwaye yeyanamhlanje, zihlobo!

Imithombo ekuthethwe ngayo:

• https://wiki.debian.org/LDAP
• Isikhokelo soMlawuli se-OpenLDAP 2.4
• Ubuntu 12.04 umncedisi