System Administration and IT Infrastructure Services. Week 4: Directory Services Already Passed

System Administration and IT Infrastructure Services. Week 4: Directory Services Already Passed What does a directory server provide? a lookup service for an organization; A directory service allows members of an organization to lookup information about the organization, like network resources and their addresses. What benefits does replication provide? Check all that apply. redundancy; Directory server replication grants you redundancy by having multiple copies of the database being served by multiple servers. The added servers that provide lookup services also reduce the latency for clients querying the service. decreased latency What's the most popular directory services protocol used today? lightweight directory access protocol; LDAP is the most popular and widely used directory access protocol today. Which of these are examples of centralized management? Check all that apply role-based access control; Role-based access control makes it easier to administer access rights by changing role membership and allowing for inheritance to grant permissions (instead of granting each permission individually for each user account). Centralized configuration management is an easier way to manage configurations for services and hardware. By centralizing this, it becomes easier to push changes to multiple systems at once. centralized configuration management Which of these are components of an LDAP entry? Check all that apply. Common Name; The Common Name contains a descriptor of the object, like the full name for a user account. ADistinguished Name is the unique name for the entry, and includes the attributes and values associated with the entry. Distinguished Name What's does the LDAP Bind operation do exactly? authenticates a client to the directory server; A client authenticates to a directory server using the Bind operation. This could either be: (1) an anonymous bind; (2) a simple bind, where the password is sent in plaintext; or (3) an SASL bind, which involves a secure challenge-response authentication scheme. Which of the following are authentication types supported by the LDAP Bind operation? Check all that apply. anonymous; Bind operations support three different mechanisms for authentication: (1) Anonymous, which doesn't actually authenticate at all, and allows anyone to query the server; (2) Simple, which involves sending the password in plaintext; and (3) SASL, or Simple Authentication and Security Layer, which involves a secure challenge-response authentication mechanism. simple SASL What is Active Directory? Check all that apply. microsoft's implementation of a directory server; Active Directory is Microsoft's Windows-specific implementation of a directory server. It's fully LDAP compatible, so it works with any LDAP-supported client, though it has some features unique to the Windows ecosystem.