Ldap Client Applications; Openldap Configuration Files - Red Hat ENTERPRISE LINUX 4.5.0 Reference Manual

Chapter 13. Lightweight Direc...
The package adds LDAP support to the PHP4 HTML-embedded scripting language
php-ldap
via the
/usr/lib/php4/ldap.so
information stored in an LDAP directory.
Red Hat Enterprise Linux ships with the
This module uses the short form of the distinguished name for a subject and the issuer of the
client SSL certificate to determine the distinguished name of the user within an LDAP directory.
It is also capable of authorizing users based on attributes of that user's LDAP directory entry,
determining access to assets based on the user and group privileges of the asset, and denying
access for users with expired passwords. The
module.
mod_authz_ldap
Important
The
mod_authz_ldap
using an encrypted password hash. This functionality is provided by the
experimental
Enterprise Linux. Refer to the Apache Software Foundation website online at
http://www.apache.org/

3.3. LDAP Client Applications

There are graphical LDAP clients available which support creating and modifying directories, but
they are not included with Red Hat Enterprise Linux. One such application is LDAP
Browser/Editor — A Java-based tool available online at http://www.iit.edu/~gawojar/ldap/.
Most other LDAP clients access directories as read-only, using them to reference, but not alter,
organization-wide information. Some examples of such applications are Sendmail, Mozilla,
Gnome Meeting, and Evolution.

4. OpenLDAP Configuration Files

OpenLDAP configuration files are installed into the
a brief list highlighting the most important directories and files:
•
/etc/openldap/ldap.conf
use the OpenLDAP libraries such as
Gnome Meeting.
•
/etc/openldap/slapd.conf
Section 6.1, "Editing
•
/etc/openldap/schema/
daemon. Refer to
slapd
240
module. This module allows PHP4 scripts to access
mod_authz_ldap
module does not authenticate a user to an LDAP directory
mod_auth_ldap
for details on the status of this module.
— This is the configuration file for all client applications which
ldapsearch
— This is the configuration file for the
/etc/openldap/slapd.conf
directory — This subdirectory contains the schema used by the
Section 5, "The
/etc/openldap/schema/
module for the Apache HTTP Server.
module is required when using the
mod_ssl
module, which is not included with Red Hat
/etc/openldap/
, , Sendmail, Evolution, and
ldapadd
" for more information file.
directory. The following is
daemon. Refer to
slapd
Directory" for more