LDAP

When you create an entry in a _______its data contents are contained in attributes, which are grouped into objectclasses, which are packaged into schemas. glossary. stuff. DIT. TID.

LDAP Attributes typically contain data. Every attribute is defined in a schema. Every attribute is included in one or more objectclasses. An attribute definition includes its type (or SYNTAX). All of these.

TOP objectclass is defined. top is always the top of a hierarchy. cannot have a SUP statement. More than one of the above. All of these.

Operational characteristics of the LDAP server. Matching rules. caseIgnoreMatch. globally unique. More than one of the above.

LDAP Operational Attributes and Objects live under. rootDSE . not visible in normal operations. More than one of the above. None of these.

The main server in the LDAP suite. Stand-Alone LDAP Daemon. OpenLDAP libraries. Clients access LDAP servers. CLAPD .

OpenLDAP suite can be broken. Libraries. Utilities. More than one of the above. None of these.

stable branch for OpenLDAP . 2.3 branch. 2.4 branch. 2.2 branch. 2.1 branch.

 Basic OpenLDAP configuration in Ubuntu requires a few extra libraries and packages. The Berkeley Database. The OpenSSL libraries. The Cyrus SASL library. All of these.

The clients are packaged in OpenLDAP. libldap-2.3-0. slapd. slurpd. ldap-utils.

OpenLDAP server can handles. client requests and directory management. replicating changes to other directories. More than one of the above. None of these.

OpenLDAP server configuration file slapd.conf contains heading. Basics. Database Configuration. ACLs. All of these.

OpenLDAP server configuration file slapd.conf supported the schema. core.schema. cosine.schema. inetorgperson.schema. All of these.

OpenLDAP server can use different storage backends as. BDB. flat files. SQL database. All of these.

ACLs to grant common permission levels. none. auth. More than one of the above. None of these.

OpenLDAP can be installed in. Fedora. FreeBSD. Windows. All of these.

LDAP defines some basic models to describe its operations. LDAP Naming Model. LDAP Authentication Model. More than one of the above. None of these.

LDAP information model determines as. Allows directory information to be referenced and organized. The form and character of information in the directory. More than one of the above. None of these.

LDAP Commonly Used Command-Line Options "-P". The bind password in simple authentication. Wallet password. The port number of the directory server. None of these.

The command-line tool ldapmodify to modify existing entries type. add. delete. modrdn. All of these.

OpenLDAP Tools "slapcat" used in. export an LDIF from an LDAP database. stand-alone LDAP daemon. verify SASL data against a DIT. verify a DN against a DIT configuration.

ldapmodify/ldapadd [-a] [-c]. Add new entries. Calculating operation mode. More than one of the above. Enable SASL Interactive mode.

ldappasswd [-A]. The current password is defined by oldpassword value. Prompt for old (current) password. clear text password for simple authentication. None of these.

ldapsearch [-a never|always|search|find]. Retrieve attributes only (no values). Specify how alias dereferencing is done. Use base (DN) as the starting point for the search instead of the default. All of these.

OpenLDAP tools "slapd " refer to. stand-alone LDAP daemon. verify SASL data against a DIT. search LDAP entries. All of these.

OpenLDAP user configuration As. $HOME/ldaprc. $HOME/.ldaprc. ./ldaprc. All of these.

Require SASL Encryption in Directory Server. dsSaslMin. dsSaslMinSSF. dsSaslMinS. dsSaslSSF.

Required Disallow SASL Encryption. More than one of the above. dsSaslMinS. dsSaslMinSSF. dsSaslMaxSSF.

What are different type of ACL. Standard Access List. Extended access List. More than one of the above. None of these.

What is Wildcard Mask in ACL. specify an individual hosts, a network, or a range of network. give sequence number. protocols. All of these.

How to permit or deny specific Host in ACL. Using a wildcard mask. Using keyword. More than one of the above. None of these.

In which directions we can apply an Access List. IN - ip access-group 10 in. IN - ip access-group 10 in. Using keyword. More than one of the above.

Difference between #sh access-list command and #sh run access-list command?. sh access-list shows number of Hit Counts. sh run access-list does not show number of Hit Counts. More than one of the above. None of these.

How Access Lists are processed?. sequential, logical order, evaluating packets from the top down. one statement at a time. the permit or deny option. All of these.

How do I use TLS/SSL?. StartTLS for initiating TLS/SSL. ldaps:// and LDAPS refers to "LDAP over TLS/SSL" or "LDAP Secured". More than one of the above. None of these.

Requirements for an LDAPS certificate as. A private key that matches the certificate is present in the Local Computer's store. The Enhanced Key Usage extension includes the Server Authentication . The Active Directory fully qualified domain name of the domain controller. All of these.

LDAPS communication to a global catalog server occurs over TCP. 3269. 636. 389. All of these.

How do I turn on slapd(8) logging?. start slapd(8) with the -d option. start slapd(8) with the -s option. slapd -d stats,acl. All of these.

Why SLAPD hold multiple naming contexts?. multiple databases and each database can support multiple suffixes. single suffix approach is preferred. More than one of the above. None of these.

What should default referral be set to in OpenLDAP?. holds the root of your directory information tree. using Internet style naming (ie: "dc=example,dc=com"). X.500 style naming (ie: "o=Example Company,c=XX"). All of these.

What system parameters factors in performance in SLAPD?. Memory. Disk. Filesystem. All of these.

OpenLDAP's suite supports replication as. Replication via syncrepl. Replication via the slurpd daemon. More than one of the above. None of these.

Why is Syncrepl better?. Syncrepl is self-synchronizing. Syncrepl can operate in either direction. Data updates can be minimal or maximal. All of these.

How do I implement a pushed based replication system using Syncrepl?.  LDAP backend (Backends and slapd-ldap(8)) to your slave directory. setup Syncrepl to point to your Master database. More than one of the above. None of these.

OpenLDAP Performance cachesize directive used for. the number of entries that the LDAP backend will maintain in memory. The frequency of checkpointing. database does NOT need to be updated immediately with any in-memory . None of these.

The dirtyread directive allows OpenLDAP as. return in-memory data that may not yet have been written to disc. to maintain or have plans to create a multi-DIT. directory it is sensible to create a sensible subdirectory. All of these.

What is used for DB_CONFIG file in OpenLDAP for performance?. A multiple DITs (multiple database sections in slapd.conf). For each directory containing a database. To check some performance stats of the database. All of these.

DB_CONFIG file in OpenLDAP contaning Aditional Tuning directory directive. set lk_detect DB_LOCK_DEFAULT. set_flags DB_TXN_NOSYNC. More than one of the above. None of these.

when is an overlay really an overlay in OpenLDAP?. If the overlays are dynamic they need a moduleload directive. olcModuleLoad if using cn=config. Overlays can be either dynamic or static. All of these.

how do know whether overlays are static or dynamic in OpenLDAP?. Overlays can be either dynamic or static. Overlays can only dynamic. Overlays can only static. All of these.

Standard LDAP Error Messages "LDAP_SUCCESS". 3. 0. 1. 4.

LDAP_REFERRAL error message means. Indicates a LDAP Referral response. include one or more LDAP URLs. More than one of the above. None of these.

Standard LDAP Error Messages as. LDAP_TIMELIMIT_EXCEEDED. LDAP_SIZELIMIT_EXCEEDED. LDAP_SASL_BIND_IN_PROGRESS. All of these.

How to configure Master-Slave LDAP replication?. create a ldap user that is allowed to read all ldap entries to replicated it to the consumer server. to enable the provider service in the master ldap server and give the user ldaps2 read access to the entire ldap server. Need to enable replicating from a specified server to our ldap consume. All of these.

How to completely remove ldap and remove the directory tree. delete /var/lib/ldap/*. apt-get remove --purge package. A simple sudo dpkg-reconfigure slapd should perform the task. All of these.

How to allow LDAP user to change password?. in the slapd.conf write access control rule. At /etc/pam.d/common-password removing the use_authtok parameter and save the file. need to restart. All of these.

OpenLDAP Configure Multiple DITs needs to. slapd.conf. LDIF. DIT. More than one of the above.

What is used entryCSN in OpenLDAP. syncrepl style replication operations. mandated to create an entryUUID . comparison rule of an attribute. All of these.

Open Source LDAP Tools and Browsers are. JXPlore. FusionDirectory. phpLDAPadmin. All of these.

Using TLS with SASL EXTERNAL both client and servers require as. valid X.509 certificate. commercial Certificate Authority (CA). TLS/SSL session starts . None of these.