OpenLDAP Training in Thimphu, Bhutan

This training provides a hands-on introduction to installing, configuring, securing, and administering OpenLDAP. Participants will learn how to deploy directory services, manage users and groups, integrate LDAP with applications, implement authentication, configure replication, and perform troubleshooting in real-world environments.

Foundations & Core Administration

1. Introduction to Directory Services & OpenLDAP

• What is LDAP?
• Directory Services vs Databases
• Key LDAP concepts: DN, RDN, entries, attributes, schema
• OpenLDAP components overview: slapd, command-line tools
• Real-world use cases (identity management, contact directories, Linux login, apps integration)

2. Installing & Setting Up OpenLDAP

• Installing OpenLDAP via package manager (Ubuntu/CentOS)
• Folder structure overview
• Basic slapd configuration (using cn=config)
• Starting, stopping, checking service status
• Testing the server using ldapsearch

Hands-On Lab

3. Designing a Simple DIT (Directory Information Tree)

• Understanding object classes & attributes
• DIT design principles
• Creating a base DIT (e.g., dc=example,dc=com)
• Introduction to LDIF structure (entries, attributes, indentation rules)

Hands-On Lab

4. Managing LDAP Entries

• Adding and modifying users & groups
• Using:
• ldapadd
• ldapmodify
• ldapdelete
• Searching for entries using filters
• Intro to password hashing and user password updates

Hands-On Lab

5. Introduction to LDAP Security

• Why LDAP must run over TLS
• Generating self-signed certificates
• Enabling TLS/SSL in OpenLDAP
• Securing simple binds
• Conceptual intro to ACLs

Hands-On Lab

Intermediate Administration & Practical Usage

1. LDAP Integration Basics

• LDAP client utilities
• Overview of NSS/PAM/SSSD (conceptual, not full configuration)
• Understanding how Linux resolves LDAP users
• Optional simplified demo of system authentication

Hands-On

2. Backup & Maintenance

• Exporting data with slapcat
• Restoring directory with slapadd
• Backing up schemas and configuration
• Online vs offline backups

Hands-On Lab

3. Lightweight Replication

• What is replication & why it matters
• Syncrepl basic concepts
• Setting up a simple provider → consumer replication
• Monitoring replication status

Hands-On Demo

4. Managing LDAP Schemas

• What is a schema?
• Common object classes (inetOrgPerson, organizationalUnit)
• Adding custom schema files (beginner-friendly approach)
• Verifying schema correctness using slaptest

Hands-On Lab

5. Basic Troubleshooting & Best Practices

• Checking logs (/var/log/syslog, journalctl)
• Using slaptest for config validation
• Checking ACL-related issues
• Permissions and ownership
• Directory design best practices
• Avoiding common configuration mistakes

Hands-On Lab

6. Summary, Review & Practical Exercises

• Review of skills learned
• When to use LDAP vs other identity systems
• Practical tips for deploying OpenLDAP in real environments