Deepak Prasad

Tune large LDAP groups in 389 Directory Server with safe membership indexes, scoped memberOf processing, fixup tasks, and repeatable benchmarks.

Configure 389 Directory Server disk monitoring, thresholds, grace periods, read-only protection, safe testing, and low-space recovery.

Configure 389 Directory Server Attribute Uniqueness with dsconf to reject duplicate mail, uid, and employeeNumber values across subtrees.

Configure 389 Directory Server indexes with dsconf backend index, detect notes=A and notes=U unindexed searches, and reindex online or offline for faster LDAP filters.

Configure Managed Entries to create companion LDAP entries and Linked Attributes to maintain reverse DN relationships in 389 Directory Server.

Configure the 389 Directory Server Distributed Numeric Assignment plug-in for automatic uidNumber and gidNumber allocation, magic regeneration values, separate or shared ranges, multi-supplier range transfer, monitoring, …

Configure 389 Directory Server Auto Membership with regex rules, fallback groups, fixup cleanup, and dry-run testing for static group assignment.

Enable and configure the 389 Directory Server Referential Integrity plug-in to remove stale DN references after delete, update member and uniqueMember after rename or move, scope processing, index attributes, audit …

Configure the 389 Directory Server memberOf plug-in for member and uniqueMember groups, nested membership, scopes, fixup tasks, and replication.

Disable and reactivate LDAP user accounts in 389 Directory Server with dsidm account lock, nsAccountLock, role lock, and the Account Policy plug-in for lastLoginTime tracking and automatic inactivity enforcement.

Understand how 389 Directory Server hashes LDAP passwords, inspect userPassword prefixes, change the global storage scheme, migrate legacy hashes after successful binds, and test application compatibility.

Prepare a FIPS-enabled host, enable NSS FIPS mode for 389 Directory Server, audit cryptographic compatibility, verify TLS and LDAP, and plan rollback.

Configure client certificate authentication in 389 Directory Server with certmap.conf, trust the client CA, test SASL EXTERNAL over LDAPS and STARTTLS, and verify userCertificate matching.

Inventory, renew, replace, back up, and restore 389 Directory Server TLS certificates in the instance NSS database after LDAPS and STARTTLS are already enabled.

Reject insecure LDAP simple binds in 389 Directory Server, enforce a minimum SSF, preserve root DSE and LDAPI access, and verify allowed connections.

Configure advanced 389 Directory Server ACIs with targetfilter, targattrfilters, target_from and target_to, userattr, groupdn filters, IP and DNS rules, SSF, time limits, and Boolean bind expressions.

Learn 389 Directory Server ACI syntax, placement, and access rights with ldapmodify examples for userdn and groupdn read, write, add, and delete permissions plus troubleshooting.

Delegate 389 Directory Server administration with groupdn ACIs for read-only, help-desk, user, group, and department roles without sharing Directory Manager credentials.

Enable per-backend attribute encryption in 389 Directory Server with dsconf backend attr-encrypt, export and reimport with dsctl ldif2db --encrypted, verify LDAP access, and plan certificate and replication dependencies.

Enable and disable backend and instance read-only mode in 389 Directory Server with dsconf, verify LDAP result code 53 on writes, recover from dse.ldif, and avoid replication mistakes.

Configure default, smart, suffix, and replication LDAP referrals in 389 Directory Server with dsconf, ldapmodify, client tests, security notes, and cleanup.

Configure pointer, indirect, and classic Class of Service (CoS) in 389 Directory Server with tested LDIF examples, qualifiers, verification, and cleanup.

Compare groups with managed, filtered, and nested roles in 389 Directory Server. Learn how nsRole, memberOf, and dynamic membership differ.

Rename LDAP entries, move users between OUs, and rename subtrees in 389 Directory Server with ldapmodify modrdn records, deleteOldRDN, newSuperior, and dsidm rename helpers.

Prepare a custom Directory Server root with dscreate ds-root, add administration wrapper scripts to PATH, create an unprivileged ldap-dev instance on ports above 1024, and manage it with user-specific dsctl commands.

Plan, create, and manage multiple 389 Directory Server instances on one host with unique names, LDAP ports, suffixes, systemd units, and client profiles.

Understand 389 Directory Server architecture, including instances, ns-slapd, suffixes, backends, LMDB databases, schema, plug-ins, configuration, and replication.

Compare OpenLDAP and 389 Directory Server across installation, administration, access control, replication, plugins, performance, migration, and use cases.

Configure OpenLDAP MDB indexes with olcDbIndex, map LDAP filters to index types, build indexes online, rebuild them with slapindex, and measure search performance.

Migrate local users and groups to OpenLDAP on RHEL, Rocky Linux, AlmaLinux, Oracle Linux, and CentOS Stream while preserving UID, GID, passwords, groups, and file ownership.