Really helpful! I appreciate your regular reminders about not getting too caught up in the details and keeping it simple. Everything I've read so far talks about 'basics', but then start to dig deep into object classes, schemas, attributes, the rules for what is used where, etc., without a lot of practical examples to illustrate. Thanks for creating this!
I thank you from the bottom of my heart for your so very kind and generous comment Glebe. It means a lot and is very very encouraging. Africa, I've heard, is a wonderful place and I truly wish one day I get a chance to journey there. Luckily, the technology has advanced so much so that we can collaborate with each other very effectively regardless of how close we are stationed physically. I'll continue to put efforts to share whatever I know in the best possible ways. Once again , thank you so much for your kindess.
Thank you! You know, I love India and I'll tell you why: I will never forget that at a time the developed world was making a killing by hiking the price of anti-AIDS medicines while refusing to share patents, India broke ranks and started providing the medication for almost no profit and eventually accelerated research in this area. Even though the main media avoids any mention of this, I WILL NEVER FORGET THAT. The underdevelopment of Africa is artificial as India's was in the 19th century but India escaped and they will not repeat the mistake and let Africa escape too. But that's the way the world is. Thanks again.
I've been in the Active Directory world since, well, it was called NT Domains. I've known LDAP was the background to it, but haven't sat down to learn it fully until I now require it in my life. The idea of CustomTShirtSize as an attribute for an ou=Customers as an auto-add for a customers shop made me grin like the Joker. Thank you, good sir. You are a scholar and a gentleman.
Its funny but true that I have tried to understand ldap four to five times in past two years. Thanks a lot Sir, I have understood each and every term now. Great explanation, presentation. keep it up
Please continue making video's. I love the fact that I can see your face while you are explaning. I miss this kind of concept in Tutorials in RUclips. Also, you always explain "why" or "what". Most of the Tutorials, they just say "do this, do that, it's the best", but you always explain, why it is the best. I would love to see some video's about Active Directory and SCCM from you. Any possibility's?
Hello Ayhan, Thank you for watching my tutorial, also for your kind and encouraging comments. I'm so glad to know that you find the tutorial useful. I'm no expert in Active Directory & SCCM. Since AD is an infrastructure component that shows up almost everywhere, I'm doing a self learning on the same by the end of which hopefully I can make some tutorials that might be useful for others. Thanks again for taking time to watch videos!
Sir... I am a housewife...I have done my MCA...I lives in bangalore..and I want to learn foregerock IDM From you..I went through ldap tutorial...the way of explaining is too good...in the same way I want to learn forgerock too..can you please tell me how to approach you and learn foregerock...
Hello Sir, I need your help in understanding push replicas. Are we really need a push replicas, if so how many minimum push replicas needed.I have 4 masters,4 replicas now I want to see if this is a efficient architecture or not. Reason for rechecking for architecture are am having problems on 3 servers which have incorrect replica id 65535. But actual supplier id that was configured is different.am worrying if we add server with incorrect replica id replication might messup or so. Please help me sir.I can connect with you offline.
LDAP is the protocol to access the data in the directory service database. LDAP itself does not store the data as shown in the first screenshot that is shown. Please correct me if i am wrong! :)
You are right, LDAP is a protocol and LDAP server is an implementation of that protocol. I had oversimplified that on the whiteboard, but do mention it during the discussion.
Hi Rajesh...Thank you for the openldap playlist. I am looking for knowledge base build a process to add and modify ldap entries using database table. Can you please provide your inputs. Thank you
@@ramshankarreddy5534 The best place to start would be the "Getting Started documentation" from ForgeRock here: backstage.forgerock.com/docs/am/6.5/quick-start-guide/ The best way to learn ForgeRock products is to have a local environment setup, and try different use cases referring to the ForgeRock documentation / forums. I have a playlist that has 82 videos various use cases around all the four ForgeRock products. Though based on older versions, it should help you learn quite a bit before we get to see a virus free environment: ruclips.net/video/Opma7Mx2Zyw/видео.html
Thanks. It is very useful. Is ou an attribute under the object class 'organizationUnit'? or uid an attribute under the object class 'Account'? What is the difference with other attributes under the same object class? What attribute I can use as part of the DN?
i really like your explanation and your method but everything change in the dynamic ldap and i hop you can find the time to make a new series at this matter
@@RajeshRajasekharan im a noob so i was trying to follow you step by step and nothing works cus a lot of directory and file changed and i found dr murphy on youtube speak about the slapd.conf changing to cn=config format so that's all i know thank you any way i ask every linux channel i subscribed to it and nobody answering me
@@elabeddhahbi3301 No problems, Sir. In all likelihood, you are referring to the Online Configuration (OLC) in OpenLDAP. I am covering that in a video tutorial at the following link : ruclips.net/video/kBgiASiHqf8/видео.html My full OpenLDAP playlist is here, just in case: ruclips.net/video/kBgiASiHqf8/видео.html Thanks for watching!
Hello Amrita, Thank you for watching. The OpenLDAP playlist that has all OpenLDAP videos is at the link below: m.ruclips.net/p/PLfO6SFqcY2PrDR5yct96n4qfgMmh6g0eP It might help to watch them in sequence. Rajesh
This is very insightful. Can you help me with a link on how i can intergrate different sites so that am able to access all of them using one credential?
Hello Timon, You are looking for SSO (Single Sign On). You have a number of vendors who offer tools to achieve Single Sign On. I have on my RUclips Channel and playlist titled 'ForgeRock' Videos. It has videos on a product called OpenAM that helps achieve SSO across Web Application. Please see if it helps.
LDAP stands for Light Weight Directory Access Protocol. Just they way 'http' is used to access Web Pages running on a Web Server, LDAP is used to access data on a LDAP Server. Active Directory is Microsoft's implementation of an LDAP Server. You use LDAP to access AD. Similarly other Directory Services like OpenLDAP, OpenDJ are different implementations of a LDAP server. You use LDAP to access data in there too. So yes, LDAP is used to create/modify/read information on LDAP server (like AD).
Hello Satish, I think you are looking for extending the Schema in OpenLDAP. The following documentation section might give you a lot of hints: www.openldap.org/doc/admin24/schema.html#Extending%20Schema
sudo does not work over TLS. I am using ubuntu-16.04 as my ldap server & client. Sudo for ldap users was working fine until i configured TLS. After TLS was configured when i login with my ldap suer i can login in the client but then when i do 'sudo su' it prompt for the password again & again & following found in /var/log/auth.log: Jul 13 21:38:17 ip-10-125-1-191 sshd[20054]: nss-ldap: do_open: do_start_tls failed:stat=-1 Jul 13 21:38:17 ip-10-125-1-191 sshd[20054]: nss_ldap: reconnected to LDAP server ldap://10.125.1.145 Jul 13 21:38:17 ip-10-125-1-191 sshd[20054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.125.1.191 user=support Jul 13 21:38:17 ip-10-125-1-191 sshd[20054]: pam_ldap: could not open secret file /etc/ldap.secret (No such file or directory) Jul 13 21:38:17 ip-10-125-1-191 sshd[20052]: Accepted keyboard-interactive/pam for support from 10.125.1.191 port 46090 ssh2 Jul 13 21:38:17 ip-10-125-1-191 sshd[20052]: pam_unix(sshd:session): session opened for user support by (uid=0) Jul 13 21:38:17 ip-10-125-1-191 sshd[20052]: pam_systemd(sshd:session): Failed to create session: No such file or directory Jul 13 21:38:36 ip-10-125-1-191 sudo: nss_ldap: reconnecting to LDAP server... Jul 13 21:38:36 ip-10-125-1-191 sudo: nss_ldap: reconnecting to LDAP server (sleeping 1 seconds)... Jul 13 21:38:37 ip-10-125-1-191 sudo: nss_ldap: could not search LDAP server - Server is unavailable I have tested my TLS works fine. I followed this links to configure TLS: www.server-world.info/en/note?os=Ubuntu_16.04&p=ssl www.server-world.info/en/note?os=Ubuntu_16.04&p=openldap&f=4 I have searched google & few links says it's a bug. However i am not quite sure about it. I request for your suggestion. It will be great if you can help me on this.
Hello Vivek - LDAP is a protocol (Light Weight Directory Access Protocol). Active Directory is Microsoft's implementation of LDAP protocol. OpenLDAP is another implementation of LDAP , but open source. There are many such implementations like DS from ForgeRock, eDirectory from Novell, Tivoli Directory Server from IBM etc.
Year 2023 and still the best video available on youtube for LDAP. fortunate to get this suggestion, really appreciate you 👏👏
Thank you so much for your kind comment.
Year 2021 and yet this is the best ever series on LDAP available on RUclips. Thank you so much.
Thank you so much Bharat for taking time to watch my video, more so for your very kind and encouraging comment.
still in 2023
2024 and still the best damn crazy
Thank you, @@wilroydmello
Thank you @@aaammm1888
This is the best video I came across in order to understand what ldap is. Thank you so much
Thank you so much, Munna, for your kind words.
I have been struggling with understanding even basic of LDAP and you made it so easy, best video on LDAP
Thank you so much for your kind words.
THE BEST training video about LDAP that I found in RUclips !!! ^^
Thank you :-)
Really helpful! I appreciate your regular reminders about not getting too caught up in the details and keeping it simple. Everything I've read so far talks about 'basics', but then start to dig deep into object classes, schemas, attributes, the rules for what is used where, etc., without a lot of practical examples to illustrate. Thanks for creating this!
Thank you so much, Steven, for your kind words. Glad you found this video useful.
Find it best on LDAP so far. Very helpful and easy to understand lecture. more power to you. Thanks for making this.
Thank you so much Muhammad.
Thank you so much sir!, i learnt from you in 2018 and implement central authentication in our organisation using OpenLDAP until now we are enjoying!!
Thank you so much @Juma Nassoro for your kind words.
You do a good job explaining the details - and your enunciation allows me to understand you easily. I'd upvote twice if I could.
Thank you so much for your kind comment. Very encouraging. It's a compliment that I can live on for days. Thank you again :-)
I am African and I am sure if I had had a teacher like you I would be a doctor today. Please come to Africa, we need you.
I thank you from the bottom of my heart for your so very kind and generous comment Glebe. It means a lot and is very very encouraging. Africa, I've heard, is a wonderful place and I truly wish one day I get a chance to journey there. Luckily, the technology has advanced so much so that we can collaborate with each other very effectively regardless of how close we are stationed physically. I'll continue to put efforts to share whatever I know in the best possible ways.
Once again , thank you so much for your kindess.
Thank you! You know, I love India and I'll tell you why: I will never forget that at a time the developed world was making a killing by hiking the price of anti-AIDS medicines while refusing to share patents, India broke ranks and started providing the medication for almost no profit and eventually accelerated research in this area. Even though the main media avoids any mention of this, I WILL NEVER FORGET THAT. The underdevelopment of Africa is artificial as India's was in the 19th century but India escaped and they will not repeat the mistake and let Africa escape too. But that's the way the world is. Thanks again.
WOW, you just go from LDAP to those issues?
Hats off Mr. Rajesh. This is by far, one of the best introductory videos on LDAP I've come across
Thank you so much, Osmund. Made my day.
I've been in the Active Directory world since, well, it was called NT Domains. I've known LDAP was the background to it, but haven't sat down to learn it fully until I now require it in my life.
The idea of CustomTShirtSize as an attribute for an ou=Customers as an auto-add for a customers shop made me grin like the Joker.
Thank you, good sir. You are a scholar and a gentleman.
So kind of you, Greg. Thank you so much!
Rajesh, you have a great English! Thanks for sharing your knowledge! Such a good content!
Thank you so much 🙏
Now I can say that this is the video I was looking for so far. Much appreciated.
Thank you, Swagat, for your kind words. Thank you for watching!
I looked around for some videos in youtube on LDAP ...this is probably the best and most clear one on topic ..thanks 👍
Thank you so much, Ranjith, for taking time to watch the video, more so for very kind and encouraging words.
Its funny but true that I have tried to understand ldap four to five times in past two years. Thanks a lot Sir, I have understood each and every term now. Great explanation, presentation. keep it up
Thank you so much, Ankit. Very kind and encouraging comment. Wish you the best!
Rajesh Rajasekharan welcome sir.
You are a saviour, thanks
Thank you so much for your kind words @sassyjas1313
thank you for this great video ,much appreciated .
You are most welcome @mohamadabdeen6906 . Thank you for watching.
Really good vedio... We need more guys like u in youtube
Thank you, Umesh :-)
excellent, first of all your English so clear and coming to your explanation ,it is simply awesome
Great explanation! Many thanks from France 👏
Thank you so much, Anass.
Hey
The best class I have attended so far. You have a very gifted teaching skill. Proud of you sir.
So kind of you to say this, Sreenath. Thank you.
Awesome series man, thank you.
Thank you so much.
THE BEST training video about LDAP that I found in RUclips
Phenomenal explanation. Thanks so much.
Thank you so much, Chris. So kind!
Thank you very much for this video
You're welcome, Tika. Thank you for watching!
Thank you so much for the wonderful content
Thank you, Vasanth, for your kind comment.
Simple and clear. Thank you!
You are welcome :-) Thank you for watching, more so for an encouraging comment.
Thanks for understand me all terms in simple ways
Great video. Thanks. Best LDAP video
Thank you so much, Shiva :-)
Amazing explanation. Well done indeed. Keep up the good work
Very nice introduction to OpenLDAP...Thank you!
Thank you, Sudhir.
Please continue making video's.
I love the fact that I can see your face while you are explaning. I miss this kind of concept in Tutorials in RUclips.
Also, you always explain "why" or "what". Most of the Tutorials, they just say "do this, do that, it's the best", but you always explain, why it is the best.
I would love to see some video's about Active Directory and SCCM from you. Any possibility's?
Hello Ayhan,
Thank you for watching my tutorial, also for your kind and encouraging comments. I'm so glad to know that you find the tutorial useful.
I'm no expert in Active Directory & SCCM. Since AD is an infrastructure component that shows up almost everywhere, I'm doing a self learning on the same by the end of which hopefully I can make some tutorials that might be useful for others.
Thanks again for taking time to watch videos!
great explanation ...thanks for providing such a great source to have hands on tutorials on ldap.
Thank you for watching, Amit. Your comment is very encouraging. Thanks!
Very nice explanation Rajesh ... the iterative way of tutoring is very nice ... Appreciate your efforts
Thank you Shantanu :-)
This is the best video on the topic. Thank you.
Many thanks for your kind comment!
Very best yet
Thank you so much, Yashveer.
Great video for an introduction! I know nothing about LDAP so this was a fantastic place to start
Thank you!
You explain really well.
Thank you, Kathy.
Nice content.... just one request to make, next time please record in less noisy environment.
As the noise seem pretty uniform a noise suppression filter would probably work pretty well.
This guy is too good!!
Thank you so much, Essel.
thank you so much for the detailed explanation , it really helped me a lot
Thank you os much, Supriya, for your kind words. Glad you found it useful.
This was very helpful. Thanks
Thank you, Anshu.
very useful and easy to understand. Thanks!
Thank you Alireza. Glad you found it useful.
Great. Good start for IT beginners. wonderful job.
Sir... I am a housewife...I have done my MCA...I lives in bangalore..and I want to learn foregerock IDM From you..I went through ldap tutorial...the way of explaining is too good...in the same way I want to learn forgerock too..can you please tell me how to approach you and learn foregerock...
This is very good!
Thank you, Christopher :-)
Good demonstration, Rajesh. thx
Thank you so much, Bert-Jan :-)
Thank you, this clears alot for me. Thanks a bunch
Awesome sir...!
Thank you so much, Kesava!
Great video!
Thank you, Nestor.
Hello Sir, I need your help in understanding push replicas.
Are we really need a push replicas, if so how many minimum push replicas needed.I have 4 masters,4 replicas now I want to see if this is a efficient architecture or not.
Reason for rechecking for architecture are am having problems on 3 servers which have incorrect replica id 65535. But actual supplier id that was configured is different.am worrying if we add server with incorrect replica id replication might messup or so.
Please help me sir.I can connect with you offline.
Thanks a lot, very helpful
Thank you, Hassan.
LDAP is the protocol to access the data in the directory service database. LDAP itself does not store the data as shown in the first screenshot that is shown. Please correct me if i am wrong! :)
You are right, LDAP is a protocol and LDAP server is an implementation of that protocol. I had oversimplified that on the whiteboard, but do mention it during the discussion.
@@RajeshRajasekharan tysm... Yes, you did mention it during the discussion.. thank you for the clarification and educating me❤️
Hi Rajesh...Thank you for the openldap playlist. I am looking for knowledge base build a process to add and modify ldap entries using database table. Can you please provide your inputs. Thank you
Well thought out presentation covering the important bits. Great introduction!
Thank you :-)
@@RajeshRajasekharan hi,
Will you provide online classes for forge rock openam
@@ramshankarreddy5534 Only those programs authorised by ForgeRock University
@@RajeshRajasekharan if I want to learn forgerock openam, is there any possible way in this pandemic situation? Pls let me know if any
Thank you
@@ramshankarreddy5534 The best place to start would be the "Getting Started documentation" from ForgeRock here: backstage.forgerock.com/docs/am/6.5/quick-start-guide/
The best way to learn ForgeRock products is to have a local environment setup, and try different use cases referring to the ForgeRock documentation / forums. I have a playlist that has 82 videos various use cases around all the four ForgeRock products. Though based on older versions, it should help you learn quite a bit before we get to see a virus free environment:
ruclips.net/video/Opma7Mx2Zyw/видео.html
This is Awesome! ELI5 for LDAP
Thank you, Yashesh.
Really good explanation, thanks!
Thank you:-)
Its very nice and easy understanding in a concepts
Thank you for your kind words.
Nice Video.It was very informative,clear and precise
Thank you, Kunal, for your kind comment. Very encouraging.
Fantastic, Thank you!!
Thank you, Robert :-)
Thanks a lot for making these videos.
Pleasure! Thank you for your kind comment.
good stuff to start for begineers.. thank q sir
Excellent !!!
Thank you , Ruchi :-)
Amazing! Thank you sooooooooooooo much
Thank you so much, Tarek
Excellent presentation.
Thank you, so much Naga :-)
Thanks. It is very useful. Is ou an attribute under the object class 'organizationUnit'? or uid an attribute under the object class 'Account'? What is the difference with other attributes under the same object class? What attribute I can use as part of the DN?
Thanks for the effort. Cleared up a lot
Happy to know. Thank you for your comment!
very good explanation Rajesh. Thanks a lot.!
thank you man,it was worth watching
Extremely helpful sir! thanks a ton.
You are welcome. Glad you found it useful.
i really like your explanation and your method but everything change in the dynamic ldap and i hop you can find the time to make a new series at this matter
Thank you for your comment. Could you let me know what you meant by dynamic ldap and I'll try and see if I can generate some contents around it.
@@RajeshRajasekharan im a noob so i was trying to follow you step by step and nothing works cus a lot of directory and file changed and i found dr murphy on youtube speak about the slapd.conf changing to cn=config format so that's all i know thank you any way i ask every linux channel i subscribed to it and nobody answering me
@@elabeddhahbi3301 No problems, Sir. In all likelihood, you are referring to the Online Configuration (OLC) in OpenLDAP. I am covering that in a video tutorial at the following link :
ruclips.net/video/kBgiASiHqf8/видео.html
My full OpenLDAP playlist is here, just in case:
ruclips.net/video/kBgiASiHqf8/видео.html
Thanks for watching!
Thank you sir!
Hi Rajesh, awesome job sir. I just got the intro of the video (about 22 mins) where do I find the remaining of it.
Hello Amrita,
Thank you for watching.
The OpenLDAP playlist that has all OpenLDAP videos is at the link below:
m.ruclips.net/p/PLfO6SFqcY2PrDR5yct96n4qfgMmh6g0eP
It might help to watch them in sequence.
Rajesh
Great .. really good content and proper explanation in this video
Thank you :-)
very informative video, thanks alot. From Pakistan
You are most welcome, Awi Khan. Thank you so much for your kind comment.
Thanks man that was very helpful
Great stuff
Thank you, Jesse
Nice video for basic understanding of LDAP parameters
I have to develop the java LDAP application using Spring , Do you have any ideas for same?
Thank you Bhagashri. I don't have any knowledge of using LDAP SDK for Java. Sorry I couldn't help you much here.
No problem.. Thanks Rajesh
Man, you are amazing
Thank you!
Nice
Helpful!
good work. thanks
Thank you, Vinayak!
This is very insightful. Can you help me with a link on how i can intergrate different sites so that am able to access all of them using one credential?
Hello Timon,
You are looking for SSO (Single Sign On). You have a number of vendors who offer tools to achieve Single Sign On.
I have on my RUclips Channel and playlist titled 'ForgeRock' Videos. It has videos on a product called OpenAM that helps achieve SSO across Web Application. Please see if it helps.
thank you sir. well explained.
Thank you, Nini
Thank you this videos sir. Do you have a videos for exchange server sir?
Hello,
Not yet :(
Great and detail explanation Thank you Rajesh
Thank you Mendu!
Rajesh Rajasekharan just started learning about LDAP more sessions to go 👌
Great Video Rajesh.
Thank you, Jega :-)
I wish you would’ve talked more about the schema but good video👍
Ldap is technical or non technical..
You can think of a succinct and crisp narration. So much repeatition of words...
is ldap used for creating user accounts like activ directory in windows
LDAP stands for Light Weight Directory Access Protocol. Just they way 'http' is used to access Web Pages running on a Web Server, LDAP is used to access data on a LDAP Server.
Active Directory is Microsoft's implementation of an LDAP Server. You use LDAP to access AD. Similarly other Directory Services like OpenLDAP, OpenDJ are different implementations of a LDAP server. You use LDAP to access data in there too. So yes, LDAP is used to create/modify/read information on LDAP server (like AD).
Very helpful
Glad to know. Thank you!
Thank you, Pandurang!
Video starts 2:20
good vdieo sir
I need help regarding openldap and how to create custom person in openldap
Hello Satish,
I think you are looking for extending the Schema in OpenLDAP. The following documentation section might give you a lot of hints:
www.openldap.org/doc/admin24/schema.html#Extending%20Schema
sudo does not work over TLS. I am using ubuntu-16.04 as my ldap server & client. Sudo for ldap users was working fine until i configured TLS. After TLS was configured when i login with my ldap suer i can login in the client but then when i do 'sudo su' it prompt for the password again & again & following found in /var/log/auth.log:
Jul 13 21:38:17 ip-10-125-1-191 sshd[20054]: nss-ldap: do_open: do_start_tls failed:stat=-1
Jul 13 21:38:17 ip-10-125-1-191 sshd[20054]: nss_ldap: reconnected to LDAP server ldap://10.125.1.145
Jul 13 21:38:17 ip-10-125-1-191 sshd[20054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.125.1.191 user=support
Jul 13 21:38:17 ip-10-125-1-191 sshd[20054]: pam_ldap: could not open secret file /etc/ldap.secret (No such file or directory)
Jul 13 21:38:17 ip-10-125-1-191 sshd[20052]: Accepted keyboard-interactive/pam for support from 10.125.1.191 port 46090 ssh2
Jul 13 21:38:17 ip-10-125-1-191 sshd[20052]: pam_unix(sshd:session): session opened for user support by (uid=0)
Jul 13 21:38:17 ip-10-125-1-191 sshd[20052]: pam_systemd(sshd:session): Failed to create session: No such file or directory
Jul 13 21:38:36 ip-10-125-1-191 sudo: nss_ldap: reconnecting to LDAP server...
Jul 13 21:38:36 ip-10-125-1-191 sudo: nss_ldap: reconnecting to LDAP server (sleeping 1 seconds)...
Jul 13 21:38:37 ip-10-125-1-191 sudo: nss_ldap: could not search LDAP server - Server is unavailable
I have tested my TLS works fine. I followed this links to configure TLS:
www.server-world.info/en/note?os=Ubuntu_16.04&p=ssl
www.server-world.info/en/note?os=Ubuntu_16.04&p=openldap&f=4
I have searched google & few links says it's a bug. However i am not quite sure about it.
I request for your suggestion. It will be great if you can help me on this.
how is ldap different from AD.
Hello Vivek - LDAP is a protocol (Light Weight Directory Access Protocol). Active Directory is Microsoft's implementation of LDAP protocol. OpenLDAP is another implementation of LDAP , but open source. There are many such implementations like DS from ForgeRock, eDirectory from Novell, Tivoli Directory Server from IBM etc.
Its really so confusing for me to understand. I am sorry, You give full efforts to explain, but still I can't understood.
excellent presentation! concise and very easy to follow, thank you for creating this 😊
Thank you @sheiladiskhit5110