Your assessor shall an enabling environment to set-up a directory service infrastructure for a local area network. Using available resources, you are required to demonstrate how to:

Question

● Create directory mapping to IP addresses in accordance with manufacturer recommendations.
● Validate directory mapping to IP addresses.
● Delete directory mapping in accordance with manufacturer recommendations.
II. Develop directory mapping documentation. Attach the documents in your POE.​(10)

Answer 1

Certainly! Let's break down the steps to set up a directory service infrastructure for a local area network (LAN), focusing on the creation, validation, and deletion of directory mappings to IP addresses. This guide will also include an example of documentation you could create as part of your Portfolio of Evidence (POE).

Step 1: Create Directory Mapping to IP Addresses

1. Choose a Directory Service: Depending on your operating system, select a directory service:

   • Windows: Active Directory
   • Linux: OpenLDAP, Samba, or another LDAP implementation

2. Create a Directory Entry:

   • Example (using LDAP on Linux):

     ldapadd -x -D "cn=admin,dc=example,dc=com" -W <<EOF
     dn: cn=John Doe,ou=Users,dc=example,dc=com
     objectClass: inetOrgPerson
     cn: John Doe
     sn: Doe
     uid: johndoe
     mail: [email protected]
     userPassword: password123
     EOF
     

3. Map IP Address: Assign an IP address to the directory entry:

   • You generally have to configure a DNS server or a local hosts file to link the hostname to the IP.
   • Example (hosts file on Linux):

     sudo nano /etc/hosts
     

     Add a line for your user:

     192.168.1.10  johndoe
     

Step 2: Validate Directory Mapping to IP Addresses

1. Ping the Hostname: To ensure the mapping is valid, use the ping command:

   ping johndoe
   

2. Use nslookup: Verify that the DNS resolves correctly:

   nslookup johndoe
   

3. Check LDAP Entries:

   • Example (using ldapsearch on Linux):

     ldapsearch -x -LLL -b "dc=example,dc=com" "(uid=johndoe)"
     

Step 3: Delete Directory Mapping in accordance with Manufacturer Recommendations

1. Delete the Directory Entry:

   • Example (using LDAP on Linux):

     ldapdelete -x -D "cn=admin,dc=example,dc=com" -W "cn=John Doe,ou=Users,dc=example,dc=com"
     

2. Remove Host Entry:

   • Edit the /etc/hosts file again:

     sudo nano /etc/hosts
     

     Delete the line that maps 192.168.1.10 johndoe.

Step 4: Develop Directory Mapping Documentation

Here’s an example of what your documentation for directory mapping might look like:

---

Directory Mapping Documentation

1. Objective
To provide clear instructions on creating, validating, and deleting directory mappings to IP addresses within the local area network.

2. Directory Service Used: OpenLDAP / Active Directory
3. Domain: example.com

1. Create Directory Entry

• Command:

ldapadd -x -D "cn=admin,dc=example,dc=com" -W

• Entry:

dn: cn=John Doe,ou=Users,dc=example,dc=com
objectClass: inetOrgPerson
cn: John Doe
sn: Doe
uid: johndoe
mail: [email protected]
userPassword: password123

2. Map IP Address

• Hosts Entry:

192.168.1.10  johndoe

3. Validate Mapping

• Ping Test:

ping johndoe

• DNS Lookup:

nslookup johndoe

• LDAP Entry Validation:

ldapsearch -x -LLL -b "dc=example,dc=com" "(uid=johndoe)"

4. Delete Mapping

• Delete Command:

ldapdelete -x -D "cn=admin,dc=example,dc=com" -W "cn=John Doe,ou=Users,dc=example,dc=com"

• Remove from Hosts File: Remove line 192.168.1.10 johndoe from /etc/hosts.

---

This documentation can be formatted in a word processing document or a PDF and then attached to your Portfolio of Evidence (POE). Make sure to adapt the specifics for your environment, as the commands and configurations can vary based on the tools and the operating system you are using.