鱼漂 (一直漂)

http://directory.fedoraproject.org/

The enterprise-class Open Source LDAP server for Linux. It is hardened by real-world use, is full-featured, supports multi-master replication, and already handles many of the largest LDAP deployments in the world. The Fedora Directory Server can be downloaded for free and set up in less than an hour using the graphical console.

Key Features

• Multi-Master Replication, to provide fault tolerance and high write performance
• Scalability: thousands of operations per second, tens of thousands of concurrent users, tens of millions of entries, hundreds of gigabytes of data
• The codebase has been developed and deployed continuously by the same team for more than a decade
• Extensive documentation, including helpful Installation and Deployment guides
• Active Directory user and group synchronization
• Secure authentication and transport (SSLv3, TLSv1, and SASL)
• Support for LDAPv3
• On-line, zero downtime, LDAP-based update of schema, configuration, management and in-tree Access Control Information (ACIs)
• Graphical console for all facets of user, group, and server management

Mandriva Directory Server is an enterprise directory platform based on LDAP designed to manage identities, access control informations, policies, application settings and user profiles.

If you already use Samba, Postfix, Squid or CUPS, you can benefit from MDS today to manage your infrastructure.

http://mds.mandriva.org/

http://lam.sourceforge.net/

LDAP Account Manager (LAM) is a webfrontend for managing accounts stored in an LDAP directory.

Features:

• management of Unix user and group accounts (posixAccount/posixGroup)
• management of Samba 2.x/3 user and host accounts (sambaAccount/sambaSamAccount)
• management of Kolab 2 accounts (kolabInetorgPerson)
• profiles for account creation
• account creation via file upload
• automatic creation/deletion of home directories
• setting quotas
• PDF output for all accounts
• editor for organizational units (OU)
• schema browser
• tree view
• multiple configuration files
• multi-language support (Catalan, Chinese (Traditional + Simplified), Czech, Dutch, English, French, German, Hungarian, Italian, Japanese, Polish, Portuguese, Russian and Spanish)
• support for LDAP+SSL/TLS

Complete list of supported account types: supported types

本文系作者原创，转载请保留出处：http://marion.cublog.cn
其中理解可能也有不当之处，欢迎各位指正。

第一部分：openldap介绍

一、Directory Services(目录服务)能做什么？

我们知道，当局域网的规模变的越来越大时，为了方便主机管理，我们使用DHCP来实现IP地址、以太网地址、主机名和拓扑结构等的集中管理和统一分配。同样，如果一个局域网内有许多的其它资源时，如打印机、共享文件夹等等，为了方便的定位及查找它们，一种集中定位管理的方式或许是较好的选择，DNS和NIS都是用来实现类似管理的方法。

对于局域网内的一个用户来讲，工作等其它应用需要，我们必须凭帐号登录主机、用帐号收发E-mail，甚至为了管理需要公司还需要维护一个电子号码簿来存储员工的姓名、地址、电话号码等信息。随着时间的增长，我们会为这些越来越多的帐号和密码弄的头晕脑胀。同时，如果一个员工离开，管理员就不得不翻遍所有的记录帐号信息的文件把离职员工的信息删除。这些将是一个繁琐而效率低下的工作。那么，如果能将此些帐号信息等统一到一个文件中进行管理，无疑会大大提高员工及管理员的工作效率。目录服务（LDAP是其实现的一种）正是基于这些应用实现的。