And, yes, we've reached the end of this module, and what a module it was.
We've learned to implement identity management.
Having our centralized OpenLDAP server, means that we don't need to create
users and groups on every single system, we can share those users between our
systems. Having installed the OpenLDAP server,
we then needed to create our entries, so creating organizational units,
creating users, creating groups.
These are created, though, through text files,
LDIF files,
Lightweight Directory Interchange Format. With everything up and
running, we also needed to ensure that we had StartTLS, just
meaning that we can listen only on port 389,
but we can then request to use certificates, ensuring that our data is
going to be protected across the wire. With security set in place, and
we do need then secure transport to be able to use client machines to
utilize this as an authentication system, we can then configure our
client systems to use SSSD,
the Security Services subsystem. And with this then we are able
to see that we can authenticate as our user account on either
the Ubuntu or the AlmaLinux system,
although we only created it in our centralized user account database
inside of OpenLDAP, so I think it's something really,
really useful that we're all going to be able to make use of in some way.
But that's it, we've done and dusted on this module, and we're going to go
ahead now and take a look at the different mechanisms that we can use to
try and harden our Linux systems, so I look forward to greeting you in the next module very soon.