Integraçāo do protocolo LDAP na implementaçāo de políticas de segurança em uma rede de computadores

Abstract

With the demand from companies seeking fast and efficient ways to better adapt to current technologies and seeking ways to reduce costs by centralizing services, this work has as objective the integration of the Microsoft Active Directory service and OpenLDAP service in a virtualized environment. It was made a revision on literature where the key technologies have been raised to the integration of the Services, going through computer networks, its topologies and security best practices, Directory Services, Domain controllers, Microsoft Active Directory, OpenLDAP, DNS and group policies. To implement the Microsoft Active Directory service, it was used a virtual Microsoft Windows Server 2012 R2, which provides the basis for the Active Directory Domain Services (AD DS) and Active Directory Certificate Services (AD CS) database. The OpenLDAP service was installed on a virtual CentOS 6 Server besides LDAP Synchronization Connector software. To achieve synchronization between the databases it was used the LDAP Synchronization Connector software, which has the function of performing the integration service in order to make easier a service that is considered complicated. The basic steps starting with installation and configuration of a Microsoft Active Directory Domain and installation and initialization of an OpenLDAP database is demonstrated by implementing security policies, which will be used to apply access restrictions on a Microsoft Windows operating system, aimed at strengthening the network computer. At the end of this paper it is demonstrated the synchronization between Microsoft Active Directory user accounts and an OpenLDAP database in a simplified way due to the use of LDAP Synchronization Connector, as also demonstrated by means of security policies, restrictions that prevent access to unauthorized information. With such restrictions we achieved the goal of improving security in a corporate network.