Difference between revisions of "LPIC-3 300 Objectives V1"

From LPI Wiki
Jump to: navigation, search
(Created page with "Placeholder for beta objectives.")
 
Line 1: Line 1:
−
Placeholder for beta objectives.
+
__FORCETOC__
 +
==Introduction==
 +
 
 +
<br />
 +
 
 +
==Version Information==
 +
 
 +
These objectives are version 1.0.0rc1.  Objective renumbering will need to be done.
 +
 
 +
<br />
 +
 
 +
==Addenda==
 +
 
 +
===''Version Update Addendum (Apr 1st, 2013)''===
 +
 
 +
* released version 1.0.0rc1.
 +
 
 +
<br />
 +
 
 +
==Translations of Objectives==
 +
 
 +
The following translations of the objectives are available on this wiki:
 +
 
 +
* [[LPIC-301|English]].
 +
* [[LPIC-301(ES)|Spanish]].
 +
* [[LPIC-301(FR)|French]]
 +
 
 +
<br />
 +
 
 +
==Objectives==
 +
 
 +
===''Topic 301: Concepts, Architecture and Design''===
 +
 
 +
====<span style="color:navy">301.1 LDAP Concepts and Architecture</span>====
 +
 
 +
{|
 +
| style="background:#dadada" |
 +
 
 +
'''Weight'''
 +
 
 +
| style="background:#eaeaea" | 3
 +
|-
 +
| style="background:#dadada; padding-right:1em" |
 +
 
 +
'''Description'''
 +
 
 +
| style="background:#eaeaea" |
 +
 
 +
Candidates should be familiar with LDAP and X.500 concepts
 +
 
 +
|}
 +
 
 +
'''Key Knowledge Areas:'''
 +
 
 +
* LDAP and X.500 technical specification.
 +
* Attribute definitions.
 +
* Directory namespaces.
 +
* Distinguished names.
 +
* LDAP Data Interchange Format.
 +
* Meta-directories.
 +
* Changetype operations.
 +
 
 +
'''The following is a partial list of the used files, terms and utilities:'''
 +
 
 +
* LDIF
 +
* Meta-directory
 +
* changetype
 +
* X.500
 +
* /var/lib/ldap/*
 +
 
 +
<br />
 +
 
 +
====<span style="color:navy">301.2 Directory Design</span>====
 +
 
 +
{|
 +
| style="background:#dadada" |
 +
 
 +
'''Weight'''
 +
 
 +
| style="background:#eaeaea" | 2
 +
|-
 +
| style="background:#dadada; padding-right:1em" |
 +
 
 +
'''Description'''
 +
 
 +
| style="background:#eaeaea" |
 +
 
 +
Candidates should be able to design an implement an LDAP directory, while planning an appropriate Directory Information Tree to avoid redundancy. Candidates should have an understanding of the types of data which are appropriate for storage in an LDAP directory.
 +
 
 +
|}
 +
 
 +
'''Key Knowledge Areas:'''
 +
 
 +
* Define LDAP directory content.
 +
* Organize directory.
 +
* Planning appropriate Directory Information Trees.
 +
 
 +
'''The following is a partial list of the used files, terms and utilities:'''
 +
 
 +
* Class of Service
 +
* Directory Information Tree
 +
* Distinguished name
 +
* Container
 +
 
 +
<br />
 +
 
 +
====<span style="color:navy">301.3 Schemas</span>====
 +
 
 +
{|
 +
| style="background:#dadada" |
 +
 
 +
'''Weight'''
 +
 
 +
| style="background:#eaeaea" | 2
 +
|-
 +
| style="background:#dadada; padding-right:1em" |
 +
 
 +
'''Description'''
 +
 
 +
| style="background:#eaeaea" |
 +
 
 +
Candidates should be familiar with schema concepts, and the base schema files included with an OpenLDAP installation.  Candidates should be able to build and maintain a whitepages service.
 +
 
 +
|}
 +
 
 +
'''Key Knowledge Areas:'''
 +
 
 +
* LDAP schema concepts.
 +
* Create and modify schemas.
 +
* Attribute and object class syntax.
 +
* Plan whitepages services.
 +
* Configure whitepages services.
 +
 
 +
'''The following is a partial list of the used files, terms and utilities:'''
 +
 
 +
* Distributed schema
 +
* Extended schema
 +
* Object Identifiers
 +
* /etc/ldap/schema/*
 +
* Object class
 +
* Attribute
 +
* include directive
 +
 
 +
 
 +
<br />
 +
 
 +
===''Topic 303: Configuration''===
 +
 
 +
====<span style="color:navy">303.3 LDAP Replication</span>====
 +
 
 +
{|
 +
| style="background:#dadada" |
 +
 
 +
'''Weight'''
 +
 
 +
| style="background:#eaeaea" | 4
 +
|-
 +
| style="background:#dadada; padding-right:1em" |
 +
 
 +
'''Description'''
 +
 
 +
| style="background:#eaeaea" |
 +
 
 +
Candidates should be familiar with the server replication available with OpenLDAP.
 +
 
 +
|}
 +
 
 +
'''Key Knowledge Areas:'''
 +
 
 +
* Replication concepts.
 +
* Configure OpenLDAP replication.
 +
* Analyze replication log files.
 +
* Understand replica hubs.
 +
* LDAP referrals.
 +
* LDAP sync replication.
 +
 
 +
'''The following is a partial list of the used files, terms and utilities:'''
 +
 
 +
 
 +
* master / slave server
 +
* multi-master replication
 +
* consumer
 +
* replica hub
 +
* one-shot mode
 +
* referral
 +
* syncrepl
 +
* pull-based / push-based synchronization
 +
* refreshOnly and refreshAndPersist
 +
* replog
 +
 
 +
<br />
 +
 
 +
====<span style="color:navy">303.4 Securing the Directory</span>====
 +
{|
 +
| style="background:#dadada" |
 +
 
 +
'''Weight'''
 +
 
 +
| style="background:#eaeaea" | 3
 +
|-
 +
| style="background:#dadada; padding-right:1em" |
 +
 
 +
'''Description'''
 +
 
 +
| style="background:#eaeaea" |
 +
 
 +
Candidates should be able to configure encrypted access to the LDAP directory, and restrict access at the firewall level.
 +
 
 +
|}
 +
 
 +
'''Key Knowledge Areas:'''
 +
 
 +
* Securing the directory with SSL and TLS.
 +
* Firewall considerations.
 +
* Unauthenticated access methods.
 +
* User / password authentication methods.
 +
* Maintanence of SASL user DB.
 +
* Client / server certificates.
 +
 +
'''The following is a partial list of the used files, terms and utilities:'''
 +
 
 +
* SSL / TLS
 +
* Security Strength Factors (SSF)
 +
* SASL
 +
* proxy authorization
 +
* StartTLS
 +
* iptables
 +
 
 +
<br />
 +
 
 +
====<span style="color:navy">303.5 LDAP Server Performance Tuning</span>====
 +
 
 +
{|
 +
| style="background:#dadada" |
 +
 
 +
'''Weight'''
 +
 
 +
| style="background:#eaeaea" | 2
 +
|-
 +
| style="background:#dadada; padding-right:1em" |
 +
 
 +
'''Description'''
 +
 
 +
| style="background:#eaeaea" |
 +
 
 +
Candidates should be capable of measuring the performance of an LDAP server, and tuning configuration directives
 +
 
 +
|}
 +
 
 +
'''Key Knowledge Areas:'''
 +
 
 +
* Measure LDAP performance.
 +
* Tune software configuration to increase performance.
 +
* Understand indexes.
 +
 
 +
'''The following is a partial list of the used files, terms and utilities:'''
 +
 
 +
* index
 +
* DB_CONFIG
 +
 
 +
<br />
 +
 
 +
 
 +
 
 +
===''Topic 305: Integration and Migration''===
 +
 
 +
====<span style="color:navy">305.1 LDAP Integration with PAM and NSS</span>====
 +
 
 +
{|
 +
| style="background:#dadada" |
 +
 
 +
'''Weight'''
 +
 
 +
| style="background:#eaeaea" | 1
 +
|-
 +
| style="background:#dadada; padding-right:1em" |
 +
 
 +
'''Description'''
 +
 
 +
| style="background:#eaeaea" |
 +
 
 +
Candidates should be able to configure PAM and NSS to retrieve information from an LDAP directory.
 +
 
 +
|}
 +
 
 +
'''Key Knowledge Areas:'''
 +
 
 +
* Configure PAM to use LDAP for authentication.
 +
* Configure NSS to retrieve information from LDAP.
 +
* Configure PAM modules in various Unix environments.
 +
 
 +
'''The following is a partial list of the used files, terms and utilities:'''
 +
 
 +
* PAM
 +
* NSS
 +
* /etc/pam.d/*
 +
* /etc/nsswitch.conf
 +
 
 +
<br />
 +
 
 +
====<span style="color:navy">305.3 Integrating LDAP with Unix Services</span>====
 +
 
 +
{|
 +
| style="background:#dadada" |
 +
 
 +
'''Weight'''
 +
 
 +
| style="background:#eaeaea" | 1
 +
|-
 +
| style="background:#dadada; padding-right:1em" |
 +
 
 +
'''Description'''
 +
 
 +
| style="background:#eaeaea" |
 +
 
 +
Candidates should be able to integrate LDAP authentication with a number of common Unix services.
 +
 
 +
|}
 +
 
 +
'''Key Knowledge Areas:'''
 +
 
 +
* Integrate SSH with LDAP.
 +
* Integrate FTP with LDAP.
 +
* Integrate HTTP with LDAP.
 +
* Integrate FreeRADIUS with LDAP.
 +
* Integrate print services with LDAP.
 +
* Integrate with Kerberos.
 +
* Plan LDAP schema structure for email services.
 +
* Create email attributes in LDAP.
 +
* Integrate Postfix with LDAP.
 +
* Integrate Sendmail with LDAP.
 +
 
 +
'''The following is a partial list of the used files, terms and utilities:'''
 +
 
 +
* sshd.conf
 +
* ftp
 +
* httpd.conf
 +
* radiusd.conf
 +
* cupsd.conf
 +
* ldap.conf
 +
* Postfix
 +
* Sendmail
 +
* schema
 +
* SASL
 +
* POP
 +
* IMAP
 +
 
 +
<br />
 +
 
 +
====<span style="color:navy">305.5 Integrating LDAP with Active Directory and Kerberos</span>====
 +
 
 +
{|
 +
| style="background:#dadada" |
 +
 
 +
'''Weight'''
 +
 
 +
| style="background:#eaeaea" | 1
 +
|-
 +
| style="background:#dadada; padding-right:1em" |
 +
 
 +
'''Description'''
 +
 
 +
| style="background:#eaeaea" |
 +
 
 +
Candidates should be able to integrate LDAP with Active Directory Services.
 +
 
 +
|}
 +
 
 +
'''Key Knowledge Areas:'''
 +
 
 +
* Kerberos integration with LDAP.
 +
* Cross platform authentication.
 +
* Single sign-on concepts.
 +
* Integration and compatibility limitations between OpenLDAP and Active Directory.
 +
 
 +
'''The following is a partial list of the used files, terms and utilities:'''
 +
 
 +
* Kerberos
 +
* Active Directory
 +
* single sign-on
 +
* DNS
 +
 
 +
<br />

Revision as of 04:18, 5 April 2013

Introduction


Version Information

These objectives are version 1.0.0rc1. Objective renumbering will need to be done.


Addenda

Version Update Addendum (Apr 1st, 2013)

  • released version 1.0.0rc1.


Translations of Objectives

The following translations of the objectives are available on this wiki:


Objectives

Topic 301: Concepts, Architecture and Design

301.1 LDAP Concepts and Architecture

Weight

3

Description

Candidates should be familiar with LDAP and X.500 concepts

Key Knowledge Areas:

  • LDAP and X.500 technical specification.
  • Attribute definitions.
  • Directory namespaces.
  • Distinguished names.
  • LDAP Data Interchange Format.
  • Meta-directories.
  • Changetype operations.

The following is a partial list of the used files, terms and utilities:

  • LDIF
  • Meta-directory
  • changetype
  • X.500
  • /var/lib/ldap/*


301.2 Directory Design

Weight

2

Description

Candidates should be able to design an implement an LDAP directory, while planning an appropriate Directory Information Tree to avoid redundancy. Candidates should have an understanding of the types of data which are appropriate for storage in an LDAP directory.

Key Knowledge Areas:

  • Define LDAP directory content.
  • Organize directory.
  • Planning appropriate Directory Information Trees.

The following is a partial list of the used files, terms and utilities:

  • Class of Service
  • Directory Information Tree
  • Distinguished name
  • Container


301.3 Schemas

Weight

2

Description

Candidates should be familiar with schema concepts, and the base schema files included with an OpenLDAP installation. Candidates should be able to build and maintain a whitepages service.

Key Knowledge Areas:

  • LDAP schema concepts.
  • Create and modify schemas.
  • Attribute and object class syntax.
  • Plan whitepages services.
  • Configure whitepages services.

The following is a partial list of the used files, terms and utilities:

  • Distributed schema
  • Extended schema
  • Object Identifiers
  • /etc/ldap/schema/*
  • Object class
  • Attribute
  • include directive



Topic 303: Configuration

303.3 LDAP Replication

Weight

4

Description

Candidates should be familiar with the server replication available with OpenLDAP.

Key Knowledge Areas:

  • Replication concepts.
  • Configure OpenLDAP replication.
  • Analyze replication log files.
  • Understand replica hubs.
  • LDAP referrals.
  • LDAP sync replication.

The following is a partial list of the used files, terms and utilities:


  • master / slave server
  • multi-master replication
  • consumer
  • replica hub
  • one-shot mode
  • referral
  • syncrepl
  • pull-based / push-based synchronization
  • refreshOnly and refreshAndPersist
  • replog


303.4 Securing the Directory

Weight

3

Description

Candidates should be able to configure encrypted access to the LDAP directory, and restrict access at the firewall level.

Key Knowledge Areas:

  • Securing the directory with SSL and TLS.
  • Firewall considerations.
  • Unauthenticated access methods.
  • User / password authentication methods.
  • Maintanence of SASL user DB.
  • Client / server certificates.

The following is a partial list of the used files, terms and utilities:

  • SSL / TLS
  • Security Strength Factors (SSF)
  • SASL
  • proxy authorization
  • StartTLS
  • iptables


303.5 LDAP Server Performance Tuning

Weight

2

Description

Candidates should be capable of measuring the performance of an LDAP server, and tuning configuration directives

Key Knowledge Areas:

  • Measure LDAP performance.
  • Tune software configuration to increase performance.
  • Understand indexes.

The following is a partial list of the used files, terms and utilities:

  • index
  • DB_CONFIG



Topic 305: Integration and Migration

305.1 LDAP Integration with PAM and NSS

Weight

1

Description

Candidates should be able to configure PAM and NSS to retrieve information from an LDAP directory.

Key Knowledge Areas:

  • Configure PAM to use LDAP for authentication.
  • Configure NSS to retrieve information from LDAP.
  • Configure PAM modules in various Unix environments.

The following is a partial list of the used files, terms and utilities:

  • PAM
  • NSS
  • /etc/pam.d/*
  • /etc/nsswitch.conf


305.3 Integrating LDAP with Unix Services

Weight

1

Description

Candidates should be able to integrate LDAP authentication with a number of common Unix services.

Key Knowledge Areas:

  • Integrate SSH with LDAP.
  • Integrate FTP with LDAP.
  • Integrate HTTP with LDAP.
  • Integrate FreeRADIUS with LDAP.
  • Integrate print services with LDAP.
  • Integrate with Kerberos.
  • Plan LDAP schema structure for email services.
  • Create email attributes in LDAP.
  • Integrate Postfix with LDAP.
  • Integrate Sendmail with LDAP.

The following is a partial list of the used files, terms and utilities:

  • sshd.conf
  • ftp
  • httpd.conf
  • radiusd.conf
  • cupsd.conf
  • ldap.conf
  • Postfix
  • Sendmail
  • schema
  • SASL
  • POP
  • IMAP


305.5 Integrating LDAP with Active Directory and Kerberos

Weight

1

Description

Candidates should be able to integrate LDAP with Active Directory Services.

Key Knowledge Areas:

  • Kerberos integration with LDAP.
  • Cross platform authentication.
  • Single sign-on concepts.
  • Integration and compatibility limitations between OpenLDAP and Active Directory.

The following is a partial list of the used files, terms and utilities:

  • Kerberos
  • Active Directory
  • single sign-on
  • DNS


Retrieved from "https://wiki.lpi.org/pubwiki/index.php?title=LPIC-3_300_Objectives_V1&oldid=2398"