Question

Your assessor shall an enabling environment to set-up a directory service infrastructure for a local area network. Using available resources, you are required to demonstrate how to:
● Create directory mapping to IP addresses in accordance with manufacturer recommendations.
● Validate directory mapping to IP addresses.
● Delete directory mapping in accordance with manufacturer recommendations.
II. Develop directory mapping documentation. Attach the documents in your POE.​(10)

Answer 1

Certainly! Let's break down the steps to set up a directory service infrastructure for a local area network (LAN), focusing on the creation, validation, and deletion of directory mappings to IP addresses. This guide will also include an example of documentation you could create as part of your Portfolio of Evidence (POE).

### Step 1: Create Directory Mapping to IP Addresses

1. **Choose a Directory Service**: Depending on your operating system, select a directory service:
- **Windows**: Active Directory
- **Linux**: OpenLDAP, Samba, or another LDAP implementation

2. **Create a Directory Entry**:
- **Example (using LDAP on Linux)**:
```bash
ldapadd -x -D "cn=admin,dc=example,dc=com" -W <<EOF
dn: cn=John Doe,ou=Users,dc=example,dc=com
objectClass: inetOrgPerson
cn: John Doe
sn: Doe
uid: johndoe
mail: [email protected]
userPassword: password123
EOF
```

3. **Map IP Address**: Assign an IP address to the directory entry:
- You generally have to configure a DNS server or a local hosts file to link the hostname to the IP.
- **Example (hosts file on Linux)**:
```bash
sudo nano /etc/hosts
```
Add a line for your user:
```
192.168.1.10 johndoe
```

### Step 2: Validate Directory Mapping to IP Addresses

1. **Ping the Hostname**: To ensure the mapping is valid, use the `ping` command:
```bash
ping johndoe
```

2. **Use nslookup**: Verify that the DNS resolves correctly:
```bash
nslookup johndoe
```

3. **Check LDAP Entries**:
- **Example (using ldapsearch on Linux)**:
```bash
ldapsearch -x -LLL -b "dc=example,dc=com" "(uid=johndoe)"
```

### Step 3: Delete Directory Mapping in accordance with Manufacturer Recommendations

1. **Delete the Directory Entry**:
- **Example (using LDAP on Linux)**:
```bash
ldapdelete -x -D "cn=admin,dc=example,dc=com" -W "cn=John Doe,ou=Users,dc=example,dc=com"
```

2. **Remove Host Entry**:
- Edit the `/etc/hosts` file again:
```bash
sudo nano /etc/hosts
```
Delete the line that maps `192.168.1.10 johndoe`.

### Step 4: Develop Directory Mapping Documentation

Here’s an example of what your documentation for directory mapping might look like:

---

### Directory Mapping Documentation

**1. Objective**
To provide clear instructions on creating, validating, and deleting directory mappings to IP addresses within the local area network.

**2. Directory Service Used**: OpenLDAP / Active Directory
**3. Domain**: example.com

#### 1. Create Directory Entry
- **Command**:
```bash
ldapadd -x -D "cn=admin,dc=example,dc=com" -W
```
- **Entry**:
```
dn: cn=John Doe,ou=Users,dc=example,dc=com
objectClass: inetOrgPerson
cn: John Doe
sn: Doe
uid: johndoe
mail: [email protected]
userPassword: password123
```

#### 2. Map IP Address
- **Hosts Entry**:
```
192.168.1.10 johndoe
```

#### 3. Validate Mapping
- **Ping Test**:
```bash
ping johndoe
```
- **DNS Lookup**:
```bash
nslookup johndoe
```
- **LDAP Entry Validation**:
```bash
ldapsearch -x -LLL -b "dc=example,dc=com" "(uid=johndoe)"
```

#### 4. Delete Mapping
- **Delete Command**:
```bash
ldapdelete -x -D "cn=admin,dc=example,dc=com" -W "cn=John Doe,ou=Users,dc=example,dc=com"
```
- **Remove from Hosts File**:
Remove line `192.168.1.10 johndoe` from `/etc/hosts`.

---

This documentation can be formatted in a word processing document or a PDF and then attached to your Portfolio of Evidence (POE). Make sure to adapt the specifics for your environment, as the commands and configurations can vary based on the tools and the operating system you are using.