EIEIOTECHNOVATION
← Training programmes

EIEIO / OPERATING SYSTEMS

Red Hat Enterprise Directory Services and Authentication

Reference course outline

RH4234 days
Discuss this programme →

Duration

4 days

Course Description

Red Hat® Enterprise Directory Services and Authentication is an intensive course designed to train senior system administrators in the skills required to manage and deploy the Red Hat Directory Server on and for Red Hat Enterprise Linux® systems. This course also covers cross-platform integration of directory services in order to provide authentication or information services across the enterprise. In addition, students will gain an understanding of the basic concepts, configuration, and management of LDAP-based services. This course also explores PAM, the Pluggable Authentication Modules system, and how it integrates with services that require authentication.

A Red Hat Certified Engineer (RHCE®) who successfully completes this course is prepared to take the Red Hat Enterprise Directory Services and Authentication Expertise Exam (EX423).

Course content summary

  • Understanding basic LDAP concepts
  • Configuring and managing Red Hat Directory Server
  • Managing user authentication with PAM and glibc NSS
  • Using Kerberos and LDAP to centrally manage user authentication
  • Using LDAP referrals and replication for distributed, highly available directory server performance
  • Exploring options for integration with Microsoft Active Directory authentication

Audience

  • Experienced Linux system administrators responsible for the overall security of their systems and networked services
  • Experienced Linux system administrators tasked with security on other operating systems but who now want to perform those tasks on a Red Hat Linux system
  • An RHCE interested in earning a Red Hat Certification of Expertise, or a Red Hat Certified Security Specialist (RHCSS) or Red Hat Certified Architect (RHCA) certification

Prerequisites

Before attending this course, students should have experience:

  • The essential elements of how to configure the services covered, as this course will be focusing on more advanced topics
  • Red Hat Certified Engineer (RHCE) certification is required to take the exam (EX423) or enroll in a version of this course that includes the exam (RH424)
  • For those who want to take this course without the exam (RH423 or RH423VT) and who have not earned their RHCE, confirmation of the correct skill set knowledge can be obtained by passing the online skills assessment

Introduction to directory services

  • What is a directory?
  • LDAP: models, schema, and attributes
  • Object classes
  • LDIF

The LDAP naming model

  • Directory information trees and Distinguished Names
  • X.500 and "Internet" naming suffixes
  • Planning the directory hierarchy

Red Hat Directory Server: basic configuration

  • Installation and setup of Red Hat® Directory Server
  • Using the Red Hat console
  • Using logging to monitor Red Hat Directory Server activity
  • Backing up and restoring the directory
  • Basic performance tuning with indexes

Searching and modifying the LDAP directory

  • Using command-line utilities to search the directory
  • Search filter syntax
  • Updating the directory

Red Hat Directory Server: authentication and security

  • Configuring TLS security
  • Using access control instructions (ACIs)
  • ACIs and the Red Hat console

Linux user authentication with NSS and PAM

  • Understanding authentication and authorization
  • Name service switch (NSS)
  • Advanced pluggable authentication modules (PAM) configuration

Centralized user authentication with LDAP

  • Central account management with LDAP
  • Using migration scripts to migrate existing data into an LDAP server
  • LDAP user authentication

Kerberos and LDAP

  • Introduction to Kerberos
  • Configuring the Kerberos key distribution center (KDC) and clients
  • Configuring LDAP to support Kerberos

Directory referrals and replication

  • Referrals and replication
  • Single master configuration
  • Multiple master configuration
  • Planning for directory server availability

Cross-platform centralized identity management

  • Synchronizing Red Hat Directory Server with Active Directory
  • Managing users with Winbind and LDAP
  • Mapping attributes between Linux® and Microsoft Windows
  • Install AD DS and configure it as a domain controller.

This is a version-specific reference outline. Confirm the current syllabus and delivery arrangements with EIEIO.