[P]Delete

What is Policyd? Policyd is an anti spam plugin. Policyd have some module like quotas, access control, spf check, greylisting and others. Zimbra Collaboration Suite is an email server who use Postfix as engine for MTA. By default, policyd have been bundled with Zimbra from Zimbra version 7. Why we must use Policyd? Policyd have module quotas. This module can use for limit sending/receipt email. As example just allow sending/receipt email 200 emails/hours/users. If your email server attacked by spam or compromised password some users and used by spammer, the maximum email can be sent as many as 200 emails per hour. This policy will safe your IP public from blacklist on RBL. Besides, you can check who user send email with many email How To Install Policyd on Zimbra 8.5? This guidance is step by step how to install policyd on Zimbra 8.5. # Activate Policyd   su - zimbra zmprov ms `zmhostname` +zimbraServiceInstalled cbpoli...

System Information: IP Address of FreeRadius Server: 192.168.2.200 IP Address of FreeRAdius Client Server: 192.168.2.100 Install FreeRadius on Server: yum install freeradius2 freeradius2-utils freeradius2-ldap Download radius ldap schema file and copy to ldap schema directory # wget http://open.rhx.it/phamm/schema/radius.schema # cp radius.schema /etc/openldap/schema/ Include file in ldap configuration file /etc/openldap/ slapd.conf include /etc/openldap/schema/radius.schema Edit /etc/raddb/modules/ldap and add below entry   vi /etc/raddb/modules/ldap ldap { server = "ldap01. example.com " #identity = "cn=Manager,dc=example,dc=com" #password = password basedn = "dc=example,dc=com" filter = "(uid=%{%{Stripped-User-Name}:-%{User-Name}})" base_filter = "(objectclass=posixAccount)" start_tls = no dictionary_mapping = ${raddbdir}/ldap.attrmap ldap...

[root@cmlin02 openldap]# vi /etc/rsyslog.conf ... # LDAP local4.* /var/log/ldap.log ... [root@cmlin02 openldap]# /etc/init.d/rsyslog restart Shutting down system logger: [ OK ] Starting system logger: [ OK ] [root@cmlin02 openldap]# touch /var/log/ldap.log [root@cmlin02 openldap]# service slapd restart [root@cmlin02 log]# tail -100f /var/log/ldap.log ... Jul 25 10:43:24 cmlin02 slapd[10271]: conn=1019 op=196 SRCH attr=cn Jul 25 10:43:24 cmlin02 slapd[10271]: <= bdb_equality_candidates: (member) not indexed Jul 25 10:43:24 cmlin02 slapd[10271]: <= bdb_equality_candidates: (uniqueMember) not indexed Jul 25 10:43:24 cmlin02 slapd[10271]: conn=1019 op=196 SEARCH RESULT tag=10

About CAS: The CAS protocol involves at least three parties: a  client  web browser, the web  application  requesting authentication, and the  CAS server . It may also involve a  back-end service , such as a database server, that does not have its own HTTP interface but communicates with a web application. When the client visits an application desiring to authenticate to it, the application redirects it to CAS. CAS validates the client's authenticity, usually by checking a username and password against a database (such as  Kerberos  or  Active Directory ). If the authentication succeeds, CAS returns the client to the application, passing along a  security ticket . The application then validates the ticket by contacting CAS over a secure connection and providing its own service identifier and the ticket. CAS then gives the application trusted information about whether a particular user has successfully authenticated. CAS...

In this post I am going to show you how to configure password policies in OpenLDAP server. The ppolicy overlay module provides some better functionalities for enforcing password policies within our OpenLDAP Server domain. ppolicy module and schema is by installed by default with openldap-servers package in CentOS 6.4 Copy the below text into /etc/openldap/slapd.conf at the end of the file [root@ldap1 ~]# vim /etc/openldap/slapd.conf # Uncomment the module in the modules section moduleload ppolicy.la   # Password Policy Configuration overlay ppolicy ppolicy_default "cn=default,ou=Policies,dc=example,dc=com" ppolicy_use_lockout ppolicy_hash_cleartext # ACL Entry for Password Policies access to attrs=userPassword         by self write         by anonymous auth         by * none access to *         by self write    ...

In this post I will try to explain how to configure multi-master replication of OpenLDAP Server on CentOS 6.4 In my previous post, I have shown you how to configure OpenLDAP Server with SASL/TLS. If you dont know how to configure, please visit this link http://easylinuxtutorials.blogspot.in/2013/11/installing-configuring-openldap-server.html Some important point about multi-master replication: In previous releases of OpenLDAP, replication was discussed in terms of a master server and some slave servers. In OpenLDAP version 2.4.x, it support multi-master replication model. The LDAP Sync Replication engine, syncrepl for short, is a consumer-side replication engine that enables the consumer LDAP server to maintain a shadow copy of a DIT. A provider replicates directory updates to consumers.  Consumers receive replication updates from providers. In simple, layman terms, Provider means Master, Consumer means Slave. In multi-master all providers acts as consumers. In m...

In this post I will try to explain, how to install and configure OpenLDAP Server 2.4 on CentOS 6.4. Here I have a minimal installation of CentOS 6.4 x86_64. Pre-requisites: Working DNS Server : If you don't know how to configure DNS, please click the link for step by step configuration of BIND DNS http://easylinuxtutorials.blogspot.com/2011/11/setting-up-dns-server-in-rhel-6.html Server should be synced with NTP Server. Please follow my post for NTP Server configuration Disable SELinux Steps for Installing & Configuring OpenLDAP Server: Install OpenLDAP server and client packages [root@ldap1 ~]# yum install openldap openldap-servers openldap-clients -y Installation of openldap-servers package gives a template slapd.conf with an example bdb configured. In this example, We will modify the slapd.conf to convert it to cn=config format. cn=config is a new feature of OpenLDAP 2.4 which enables dynamic changes to configuration without requiring to restart. Copy...