This section contains the following chapters:
Chapter 24, Authentication Configuration describes how to configure various authentication methods that Oracle Linux can use, including NIS, LDAP, Kerberos, and Winbind, and how you can configure the System Security Services Daemon feature to provide centralized identity and authentication management.
Chapter 25, Local Account Configuration describes how to configure and manage local user and group accounts.
Chapter 26, System Security Administration describes the subsystems that you can use to administer system security, including SELinux, the Netfilter firewall, TCP Wrappers, chroot jails, auditing, system logging, and process accounting.
Chapter 27, OpenSSH Configuration describes how to configure OpenSSH to support secure communication between networked systems.
Table of Contents
- 24 Authentication Configuration
- 24.1 About Authentication
- 24.2 About Local Oracle Linux Authentication
- 24.3 About IPA Authentication
- 24.4 About LDAP Authentication
- 24.4.1 About LDAP Data Interchange Format
- 24.4.2 Configuring an LDAP Server
- 24.4.3 Replacing the Default Certificates
- 24.4.4 Creating and Distributing Self-signed CA Certificates
- 24.4.5 Initializing an Organization in LDAP
- 24.4.6 Adding an Automount Map to LDAP
- 24.4.7 Adding a Group to LDAP
- 24.4.8 Adding a User to LDAP
- 24.4.9 Adding Users to a Group in LDAP
- 24.4.10 Enabling LDAP Authentication
- 24.5 About NIS Authentication
- 24.6 About Kerberos Authentication
- 24.7 About Pluggable Authentication Modules
- 24.8 About the System Security Services Daemon
- 24.9 About Winbind Authentication
- 25 Local Account Configuration
- 26 System Security Administration
- 26.1 About System Security
- 26.2 Configuring and Using SELinux
- 26.3 About Packet-filtering Firewalls
- 26.4 About TCP Wrappers
- 26.5 About chroot Jails
- 26.6 About Auditing
- 26.7 About System Logging
- 26.8 About Process Accounting
- 26.9 Security Guidelines
- 26.9.1 Minimizing the Software Footprint
- 26.9.2 Configuring System Logging
- 26.9.3 Disabling Core Dumps
- 26.9.4 Minimizing Active Services
- 26.9.5 Locking Down Network Services
- 26.9.6 Configuring a Packet-filtering Firewall
- 26.9.7 Configuring TCP Wrappers
- 26.9.8 Configuring Kernel Parameters
- 26.9.9 Restricting Access to SSH Connections
- 26.9.10 Configuring File System Mounts, File Permissions, and File Ownerships
- 26.9.11 Checking User Accounts and Privileges
- 27 OpenSSH Configuration