基于OpenLDAP构建高可用统一账户管理系统  

Building a High-availability Unified Account Management System Based on OpenLDAP

作　　者：刘景林[1] LIU Jinglin(Department of Information Technology,Quanzhou Vocational College of Economics and Business,Quanzhou 362000,China)

机构地区：[1]泉州经贸职业技术学院信息技术系,福建泉州362000

出　　处：《新乡学院学报》2020年第6期14-20,共7页Journal of Xinxiang University

摘　　要：由于许多单位内部存在多种需要登录认证才能访问的网络应用系统,提出了利用OpenLDAP多主同步复制机制结合KeepAlived软件搭建高可用统一账户管理系统,实现了多个应用系统都可以利用OpenLDAP服务器进行身份认证与用户账户管理。通过配置OpenSSL实现OpenLDAP服务的加密通信,同时进行OpenLDAP服务的其他相关安全配置,确保了应用系统访问的安全性。In view of the multiple network application systems that need login authentication to access in many units,building of high-availability unified account management system using OpenLDAP multi-master synchronous replication mechanism and KeepAlived software was proposed.It enables multiple application systems to use the OpenLDAP server for identity authentication and user account management.By using OpenSSL to configure encrypted communication of OpenLDAP service and performing relevant security configuration of OpenLDAP service,so as to ensure the security of access to the application system.

关 键 词：OPENLDAP KeepAlived 统一账户管理 系统安全 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]