基于OpenLDAP构建高可用统一账户管理系统

Building a High-availability Unified Account Management System Based on OpenLDAP

由于许多单位内部存在多种需要登录认证才能访问的网络应用系统,提出了利用OpenLDAP多主同步复制机制结合KeepAlived软件搭建高可用统一账户管理系统,实现了多个应用系统都可以利用OpenLDAP服务器进行身份认证与用户账户管理。通过配置OpenSSL实现OpenLDAP服务的加密通信,同时进行OpenLDAP服务的其他相关安全配置,确保了应用系统访问的安全性。

In view of the multiple network application systems that need login authentication to access in many units,building of high-availability unified account management system using OpenLDAP multi-master synchronous replication mechanism and KeepAlived software was proposed.It enables multiple application systems to use the OpenLDAP server for identity authentication and user account management.By using OpenSSL to configure encrypted communication of OpenLDAP service and performing relevant security configuration of OpenLDAP service,so as to ensure the security of access to the application system.