This project's primary aim is to build a secure authentication and network services infrastructure using recognized technologies like OpenLDAP, SSH, Apache, OpenVPN, DNS, and Kerberos.
-
OpenLDAP:
(LDAP: Lightweight Directory Access Protocol) serves as the centralized and organized directory service for efficient storage, management, and retrieval of user authentication / authorization data. -
SSH (Secure Shell):
employed for secure remote access to systems, ensuring encrypted communication between the client and the server during authentication and data transfer. -
Apache:
serves as the web server, managing role-based access to web-based applications and providing a secure environment for user interactions. -
OpenVPN:
employed to create a secure Virtual Private Network (VPN) for secure remote access to internal resources through VPN tunnels, ensuring encrypted communication over untrusted networks. -
DNS (Domain Name System):
utilized for domain resolution, mapping domain names to IP addresses, and facilitating seamless access to resources within the network. -
Kerberos:
implemented for secure ticket-based authentication within the network, providing a trusted third-party authentication service.
Setting up a centralized authentication with OpenLDAP, integrating it with SSH, Apache, and OpenVPN. Thorough testing ensures secure and controlled access. SSH secures remote system access, Apache acts as a web server with restricted access, and OpenVPN provides a secure VPN solution authenticated through OpenLDAP.
Establish a Bind DNS server on a dedicated machine, incorporating DNS records for OpenLDAP, Apache, and OpenVPN servers. Validate the setup by testing DNS resolution for each service, ensuring precise domain name configurations.
Setting up a secure Kerberos server involves installing and configuring the software, defining realms, adding user principals and their passwords' policies. Opting for SSH as the authentication service enhances security, particularly for remote access.
In memory of the numerous VMs we lost in this project. You'll never be forgotten
