Visão Geral

Este curso apresenta o Lightweight Directory Access Protocol (LDAP) e sua utilização para consulta, gerenciamento e integração com serviços de diretório. O participante compreenderá a estrutura hierárquica de diretórios, objetos, atributos, operações LDAP, autenticação e mecanismos de segurança, com foco em ambientes corporativos e Active Directory.

Objetivo

Após realizar este curso, você será capaz de:

• Compreender a arquitetura do LDAP
• Trabalhar com objetos e atributos
• Entender operações de consulta e alteração
• Analisar autenticação LDAP
• Aplicar controles básicos de segurança

Publico Alvo

• Administradores de Active Directory
• Administradores de sistemas
• Profissionais de Cybersecurity
• Desenvolvedores de aplicações corporativas
• Profissionais de infraestrutura

Pre-Requisitos

• Conhecimentos básicos de redes TCP/IP
• Familiaridade com Windows Server
• Noções de Active Directory
• Conhecimentos básicos de autenticação
• Familiaridade com linha de comando é recomendada

Conteúdo Programatico

Module 1: LDAP Fundamentals

1. LDAP concepts
2. Directory services
3. LDAP architecture
4. Directory information trees
5. Directory entries
6. Distinguished Names
7. Relative Distinguished Names
8. LDAP attributes
9. LDAP schemas
10. Directory hierarchy

Module 2: LDAP Data Model

1. Objects and entries
2. Object classes
3. Attributes
4. Attribute syntax
5. Mandatory and optional attributes
6. Schema definitions
7. Naming contexts
8. Directory structure
9. Hierarchical relationships
10. Active Directory LDAP model

Module 3: LDAP Operations

1. Bind operations
2. Search operations
3. Add operations
4. Modify operations
5. Delete operations
6. Modify DN operations
7. Compare operations
8. Unbind operations
9. LDAP responses
10. LDAP error handling

Module 4: LDAP Queries and Filters

1. LDAP search scope
2. Base object searches
3. One-level searches
4. Subtree searches
5. LDAP filters
6. Logical operators
7. Attribute matching
8. Search optimization
9. Query troubleshooting
10. Practical directory queries

Module 5: LDAP Authentication

1. LDAP bind authentication
2. Simple authentication
3. SASL concepts
4. Kerberos integration
5. NTLM integration
6. Service authentication
7. Application authentication
8. Authentication security
9. Credential protection
10. Authentication troubleshooting

Module 6: LDAP and Active Directory

1. Active Directory LDAP interface
2. Domain naming contexts
3. Users and groups
4. Computer objects
5. Organizational Units
6. Global Catalog
7. LDAP directory searches
8. Active Directory schema
9. LDAP-based administration
10. Directory integration

Module 7: LDAP Security

1. LDAP security risks
2. LDAP over TLS
3. LDAPS
4. LDAP signing
5. Channel binding
6. Access controls
7. Anonymous access
8. Credential protection
9. LDAP attack surface
10. Security hardening

Module 8: Monitoring and Practical LDAP Analysis

1. LDAP traffic monitoring
2. Authentication monitoring
3. Directory access auditing
4. Suspicious LDAP queries
5. Event correlation
6. Security investigation
7. LDAP troubleshooting
8. Performance considerations
9. Security configuration review
10. Practical LDAP security cases