LDAP Interview Questions & Answers

Question 1. What Is Ldap?

Answer :

LDAP stands for 'Lightweight Access Protocol'. It’s a database which can be access over internet or intranet, whether you know domain or IP or not. LDAP database can access by many servers over a network. LDAP is also a database of Users, Groups, Services and Resources, which provides a centralized authentication service.

Question 2. What Is Port Number For Ldap?

Answer :

LDAP – 389 and LDAPS – 636

Question 3. Why Ldap Is Called Light Weight?

Answer :

Because it is a smaller and easier protocol which was derived from the X.500 DAP (Directory Access Protocol) defined in the OSI network protocol stack.

Question 4. What Is Slapd?

Answer :

SLAPD stands for ‘Stand-Alone LDAP’, developed for long running projects.

Question 5. What Is Ldif?

Answer :

The LDAP Interchange Format (LDIF) is a standard text file format for storing LDAP configuration information and directory contents.

Question 6. What Is Ssl And Tls?

Answer :

SSL (Secure Sockets Layer) certificates are an integral part of website security. When you visit a website with SSL the site’s SSL certificate enables you to encrypt the data you send, such as credit card information, names or addresses so it can’t be accessed by hackers.

Question 7. What Is The Name Of Main Configuration File Name For Ldap Server?

Answer :

slapd.conf

Question 8. Which Configuration File Is Required For Ldap Clients?

Answer :

ldap.conf

Question 9. List Three Ldap Client Utilities Or Applications?

Answer :

1. ldapsearch
2. ldapadd and
3. ldapmodify

Question 10. How To Encrypt The Password?

Answer :

ldappasswd

Question 11. How Will You Verify Ldap Configuration File?

Answer :

slaptest -u

Question 12. List Any Graphical Editors For Ldap?

Answer :

(1) GQ, (2) Java LDAP Browser/Editor and (3) Softerra LDAP Browser

Question 13. Logical Operators For Ldap Filter?

Answer :

AND (&), OR (|), and NOT (!)

Question 14. How To Configure Ldap Protocol?

Answer :

Follow:

1. Install openldap-servers package
2. Modify olcDatabasev bdb.ldif file and olcDatabasev monitor.ldif file
3. Create Database Cache and update Database
4. Create certificate for TLS and provide ownership of ldap group to your certificate
5. Restart slapd service

Question 15. How Can We Create A Tls Certificate?

Answer :

Use command;

# openssl req -new -x509 -nodes -out /etc/pki/tls/certs/example.pem -keyout /etc/pki/tls/certs/examplekey.pem -days 365

• openssl: crytographic toolkit for SSL & TLS n/w protocols
• req: activates the parts of openssl that deals with certificate requests
• -new: generate new request
• -x509: certificate display and signing utility
• -nodes: stores private key without protecting it with a passphrase
• -out *.pem: stores certificate request in a file *.pem
• -keyout *key.pem: stores private key in a file *key.pem
• days: certificate activation days

Question 16. What Is Default Tls Certificate Location?

Answer :

For Debian/Ubuntu:

/etc/ssl/certs/

For RHEL/Fedora/CentOS:

/etc/pki/tls/certs/

Question 17. How Can We Migrate Users In Ldap?

Answer :

Following:

• Make changes according to your domain in /usr/share/migrationtools/migrate_common.ph
• # ./migrate_base.pl > /root/base.ldif
• # getent passwd | tail -n 5 > /root/users    <<For 5 users>>
• # getent shadow | tail -n 5 > /root/passwords    <<For 5 users>>
• # getent group | tail -n 5 > /root/groups    <<For 5 groups>>
• # ./migrate_passwd.pl /root/users
• # ./migrate_passwd.pl /root/users > /root/users.ldif
• # ./migrate_group.pl /root/groups
• # ./migrate_group.pl /root/users > /root/groups.ldif
• Update these files to LDAP server
• # ldapadd -x -W -D “cn=Manager,dc=example,dc=com” -f /root/base.ldif
• # ldapadd -x -W -D ‘cn=Manager,dc=example,dc=com” -f /root/users.ldif
• # ldapadd -x -W -D “cn=Manager,dc=example,dc=com” -f /root/groups.ldif
• Verify: # ldapsearch -x -b “dc=example,dc=com”

Question 18. How To Access Ldap From Client Side?

Answer :

# system-config-authentication OR # authconfig -gtk

Question 19. How Can We Access Home Directory To Ldap Client From Ldap Server?

Answer :

First, go to LDAP server and share home directory via NFS server. After this perform auto-mounting via LDAP client.

Question 20. Is There Graphical Editors For Ldap ?

Answer :

Yes, Following are some GUI based tools for LDAP

• GQ
• Java LDAP Browser/Editor
• Softerra LDAP Browser

Question 21. What Can I Do If My Application Doesn’t Speak To Ldap ?

Answer :

Gateway that translate one directory access protocol into another.

Question 22. How Can I Join Information Contained In Different Directories ?

Answer :

Distributed, Multivendor directories glued together by referrals and references.

Question 23. What Is “ldif” ?

Answer :

The LDAP Interchange Format (LDIF) is a standard text file format for storing LDAP configuration information and directory contents. LDIF files are often used to import new data into your directory or make changes to existing data.

Question 24. Name The Object Class Types ?

Answer :

• Structural Object class
• Auxiliary Object class
• Abstract object classes

Question 25. What Is The Name Of Main Configuration File Name For Ldap Server ?

Answer :

slapd.conf

Question 26. What Is The Relationship Between Ldap And Jndi?

Answer :

JNDI has classes provided by SUN that will help ur appln interact with and LDAP server. JNDI appln work similarly to JDBC applns once and be free to use ‘drivers’ from different vendors. SUN provides the “driver” that will help interact with the LDAP server. Sun also provides “drivers” for other naming services (like CORBA).

Question 27. Which Web Based Tool You Have Used For Ldap?

Answer :

phpLDAPadmin

Question 28. How You Will Verify Ldap Configuration File?

Answer :

Use “slaptest” utility.

Question 29. What Is Hdb?

Answer :

HDB is the new generation storage mechanism for OpenLDAP. Like its predecessor, the BDB backend, HDB uses the Oracle BerkeleyDB database for storage, but HDB stores entries hierarchically, a perfect fit for LDAP’s tree structure. The old BDB backend is still supported, and you can use it by specifying bdb instead of hdb in the database directive.

Question 30. Explain Module Load Directive?

Answer :

The moduleload directive instructs OpenLDAP to load a particular module.

Question 31. Explain Modulepath Directive?

Answer :

The modulepath directive provides the full path to the directory where the  modules (the compiled libraries) are stored

Question 32. Define Schemas?

Answer :

Schemas provide definitions of the different object classes and attribute types that OpenLDAP should support. Using these, OpenLDAP can determine what entries it is allowed to store, whether any given entry is valid, and how entries should optimally be stored.