300+ TOP LDAP Interview Questions [LATEST]

1. What Is Ldap?

LDAP stands for ‘Lightweight Access Protocol’. It’s a database which can be access over internet or intranet, whether you know domain or IP or not. LDAP database can access by many servers over a network. LDAP is also a database of Users, Groups, Services and Resources, which provides a centralized authentication service.

2. What Is Port Number For Ldap?

LDAP – 389 and LDAPS – 636

3. Why Ldap Is Called Light Weight?

Because it is a smaller and easier protocol which was derived from the X.500 DAP (Directory Access Protocol) defined in the OSI network protocol stack.

4. What Is Slapd?

SLAPD stands for ‘Stand-Alone LDAP’, developed for long running projects.

5. What Is Ldif?

The LDAP Interchange Format (LDIF) is a standard text file format for storing LDAP configuration information and directory contents.

6. What Is Ssl And Tls?

SSL (Secure Sockets Layer) certificates are an integral part of website security. When you visit a website with SSL the site’s SSL certificate enables you to encrypt the data you send, such as credit card information, names or addresses so it can’t be accessed by hackers.

7. What Is The Name Of Main Configuration File Name For Ldap Server?

slapd.conf

8. Which Configuration File Is Required For Ldap Clients?

ldap.conf

9. List Three Ldap Client Utilities Or Applications?

1. ldapsearch
2. ldapadd and
3. ldapmodify

10. How To Encrypt The Password?

ldappasswd

11. How Will You Verify Ldap Configuration File?

slaptest -u

12. List Any Graphical Editors For Ldap?

(1) GQ, (2) Java LDAP Browser/Editor and (3) Softerra LDAP Browser

13. Logical Operators For Ldap Filter?

AND (&), OR (|), and NOT (!)

14. How To Configure Ldap Protocol?

Follow:

1. Install openldap-servers package
2. Modify olcDatabasev bdb.ldif file and olcDatabasev monitor.ldif file
3. Create Database Cache and update Database
4. Create certificate for TLS and provide ownership of ldap group to your certificate
5. Restart slapd service

15. How Can We Create A Tls Certificate?

Use command;

# openssl req -new -x509 -nodes -out /etc/pki/tls/certs/example.pem -keyout /etc/pki/tls/certs/examplekey.pem -days 365

• openssl:
  crytographic toolkit for SSL & TLS n/w protocols
• req:
  activates the parts of openssl that deals with certificate requests
• -new:
  generate new request
• -x509:
  certificate display and signing utility
• -nodes:
  stores private key without protecting it with a passphrase
• -out *.pem:
  stores certificate request in a file *.pem
• -keyout *key.pem:
  stores private key in a file *key.pem
• days:
  certificate activation days

16. What Is Default Tls Certificate Location?

For Debian/Ubuntu:

/etc/ssl/certs/

For RHEL/Fedora/CentOS:

/etc/pki/tls/certs/

17. How Can We Migrate Users In Ldap?

Following:

• Make changes according to your domain in /usr/share/migrationtools/migrate_common.ph
• # ./migrate_base.pl > /root/base.ldif
• # getent passwd | tail -n 5 > /root/users    <>
• # getent shadow | tail -n 5 > /root/passwords    <>
• # getent group | tail -n 5 > /root/groups    <>
• # ./migrate_passwd.pl /root/users
• # ./migrate_passwd.pl /root/users > /root/users.ldif
• # ./migrate_group.pl /root/groups
• # ./migrate_group.pl /root/users > /root/groups.ldif
• Update these files to LDAP server
• # ldapadd -x -W -D “cn=Manager,dc=example,dc=com” -f /root/base.ldif
• # ldapadd -x -W -D ‘cn=Manager,dc=example,dc=com” -f /root/users.ldif
• # ldapadd -x -W -D “cn=Manager,dc=example,dc=com” -f /root/groups.ldif
• Verify: # ldapsearch -x -b “dc=example,dc=com”

18. How To Access Ldap From Client Side?

# system-config-authentication OR # authconfig -gtk

19. How Can We Access Home Directory To Ldap Client From Ldap Server?

First, go to LDAP server and share home directory via NFS server. After this perform auto-mounting via LDAP client.

20. Is There Graphical Editors For Ldap ?

Yes, Following are some GUI based tools for LDAP

• GQ
• Java LDAP Browser/Editor
• Softerra LDAP Browser

21. What Can I Do If My Application Doesn’t Speak To Ldap ?

Gateway that translate one directory access protocol into another.

22. How Can I Join Information Contained In Different Directories ?

Distributed, Multivendor directories glued together by referrals and references.

23. What Is “ldif” ?

The LDAP Interchange Format (LDIF) is a standard text file format for storing LDAP configuration information and directory contents. LDIF files are often used to import new data into your directory or make changes to existing data.

24. Name The Object Class Types ?

• Structural Object class
• Auxiliary Object class
• Abstract object classes

25. What Is The Name Of Main Configuration File Name For Ldap Server ?

slapd.conf

26. What Is The Relationship Between Ldap And Jndi?

JNDI has classes provided by SUN that will help ur appln interact with and LDAP server. JNDI appln work similarly to JDBC applns once and be free to use ‘drivers’ from different vendors. SUN provides the “driver” that will help interact with the LDAP server. Sun also provides “drivers” for other naming services (like CORBA).

27. Which Web Based Tool You Have Used For Ldap?

phpLDAPadmin

28. How You Will Verify Ldap Configuration File?

Use “slaptest” utility.

29. What Is Hdb?

HDB is the new generation storage mechanism for OpenLDAP. Like its predecessor, the BDB backend, HDB uses the Oracle BerkeleyDB database for storage, but HDB stores entries hierarchically, a perfect fit for LDAP’s tree structure. The old BDB backend is still supported, and you can use it by specifying bdb instead of hdb in the database directive.

30. Explain Module Load Directive?

The moduleload directive instructs OpenLDAP to load a particular module.

31. Explain Modulepath Directive?

The modulepath directive provides the full path to the directory where the  modules (the compiled libraries) are stored

32. Define Schemas?

Schemas provide definitions of the different object classes and attribute types that OpenLDAP should support. Using these, OpenLDAP can determine what entries it is allowed to store, whether any given entry is valid, and how entries should optimally be stored.