\section{LDAP Authentication **}

\begin{frame}
   {LDAP Authentication}


   \begin{itemize}
      \item Centralized authentication
      \item Uses PAM
      \item Use \textbf{system-config-authentication} or
      \textbf{authconfig-tui}
      \begin{itemize}
         \item Enable LDAP
         \item Specify server, search base DN, and TLS
      \end{itemize}
      \item Requires \textbf{openldap-clients},
      \textbf{pam\_ldap}, \textbf{nss-pam-ldapd}
   \end{itemize}

\end{frame}

\cprotect\note{

   The \textbf{LDAP} (\textbf{L}ightweight
   \textbf{D}irectory \textbf{A}ccess \textbf{P}rotocol)
   is an industry standard protocol for using and
   administering distributed directory services over the
   network, and is meant to be both open and
   vendor-neutral.

   When using \textbf{LDAP} for centralized
   authentication, each system (or client) connects to a
   centralized \textbf{LDAP} server for user
   authentication. Using \textbf{TLS} (\textbf{T}ransport
   \textbf{L}ayer \textbf{S}ecurity) makes it a secure
   option and is recommended.

   \textbf{LDAP} uses \textbf{PAM} and
   \textbf{system-config-authentication} or
   \textbf{authconfig-tui}.  One has to specify the
   server, search base \textbf{DN} (domain name) and
   \textbf{TLS}.  Also required is
   \textbf{openldap-clients}, \textbf{pam\_ldap} and
   \textbf{nss-pam-ldapd}.

   When you configure a system for \textbf{LDAP}
   authentication, five files are changed:
   \begin{kcode}
/etc/openldap/ldap.conf
/etc/pam_ldap.conf
/etc/nslcd.conf
/etc/sssd/sssd.conf
/etc/nsswitch.conf
   \end{kcode}
   You can edit these files manually or use one of the
   utility programs available
   (\textbf{system-config-authentication} or
   \textbf{authconfig-tui}).

}


