|
|
A Test Suite for the OpenLDAP/NSS Project
Špůrek, David ; Očenášek, Pavel (referee) ; Smrčka, Aleš (advisor)
The goal of this thesis is to create a test suite for the OpenLDAP/NSS project. The work clarifies the principles of testing, automation testing in a GNU/Linux environment, and the concepts of LDAP and NSS. Tests are designed for Fedora/Red Hat Enterprise Linux distribution and they are automated using shell scripting and the Beakerlib library for testing. Black-box testing method is used to design tests. The tests focus on the integration of OpenLDAP and NSS. In the thesis, tests are designed and implemented for openldap-clients, kerberos, nss-pam-ldapd, samba, and autofs packages.
|
|
| |
|
|
Extend USBGuard to Support External Authorization Policy Sources
Sroka, Radovan ; Smrčka, Aleš (referee) ; Peringer, Petr (advisor)
Táto práca sa zaoberá dopadom používania externých USB zariadení na bezpečnosť v rámci operačného systému Linux. Taktiež popisuje USBGuard projekt, jeho alternatívy ako aj výhody či nevýhody centralizovanej správy. Hlavým cieľom tejto práce je pridať možnosť spravovania USBGuardu centrálne pomocou LDAPu. Toto rozšírenie zahŕňa dizajn verejného rozhrania pre rôzne zdroje politík a implementáciu LDAP funkcionality. Táto práca definuje novú USBGuard LDAP schému a jej atribúty na strane serveru.
|
|
| |
|
|
Active Directory Management Dashboard
Radimák, Samuel ; Křena, Bohuslav (referee) ; Fiedor, Tomáš (advisor)
This thesis is focused on the main concepts of Active Directory and the creation of an application allowing basic management tasks. It introduces the logical as well as physical components and provides an overview of existing servers that are using the services of Active Directory. The functionality of existing management applications is discussed and desired properties of management applications are discovered. On these grounds, a new application concept is introduced and the benefits of the new application over the existing ones is shown. According to the concept, a new application is developed supporting the management of users and groups and implementing additional features such as profile photo editing and a definition of customized object creation process. This application is also tested on different levels and possibilities of future improvements are given.
|
|
|
Web Interface for Data Administration
Samek, Jan ; Burget, Radek (referee) ; Bartík, Vladimír (advisor)
This thesis deals with the issue of proposing and implementing a web application designed for data administration. This application enables the administrator to create and graphically modify presentations of data configurations, which are consequently presented to the end users. The application also contains a template subsystem that makes the process of creating the presentations more efficient. This system provides the end users with tools by dint of which it is easy to organize the displayed information and to manipulate it. The logical part of the application is implemented in the PHP programming language and the database uses the MySQL technology. The programming languages utilized for realization of user space consist of HTML, CSS and JavaScript.
|
|
|
Implementation of advanced filters based on packet classification using Linux
Malár, Lukáš ; Holešinský, Pavel (referee) ; Matocha, Tomáš (advisor)
The Master’s thesis ”The Implementation of the Advanced Filtering Based on the Packets’ Classification using Linux” is intended to the realization of an internet gateway. The gateway serves to make the connection between local network and the internet. The thesis contains a short theoretic description of parameters and types of QoS services. The classful and classless queues are mentioned in detail. The last theoretic part refers to the introducing of LDAP protocol and its usage. The practical part of this thesis captures the configuration of firewall, dns and radius server connected with LDAP databases. The thesis also contains detailed description of the production QoS by HTB with L7-filter including the compilation of system’s core. The end of the thesis contains the series of tests of created scripts.
|
|
|
Implementation of Asterisk VoIP PBX
Schön, Martin ; Münster, Petr (referee) ; Szőcs, Juraj (advisor)
The thesis is divided into two parts, theoretical and practical. In theory, it analyzed the signaling protocols, the RTP protocol for data transmission, VoIP Asterisk PBX and security options. The practical part describes the installation of the Asterisk PBX, conducted demonstration call forwarding. PBX was associated with an LDAP directory server to manage users and ejabberd for text messaging protocol XMPP. It was configured translation SIP-Skype using the SiSky Gateway and with dialplan SIP-H.323 translation. The study was to develop Dialplan with IVR. It was measured bandwidth of the audio/video codecs in an encrypted/unencrypted connections.
|
|
|
Tool for Querying SSSD Database
Bambušek, David ; Burget, Radek (referee) ; Kolář, Dušan (advisor)
Tato práce je zaměřena na databáze a konkrétně pak na databázi SSSD. SSSD je služba, která poskytuje jedno kompletní rozhraní pro přístup k různým vzdáleným poskytovatelům a ověřovatelům identit spolu s možností informace z nich získané ukládat v lokální cache k offline použití. Práce se zabývá jak databázemi obecně, tak pak hlavně LDAP a LDB, které jsou použity v SSSD. Dále popsuje architekturu a samotnou funkci SSSD. Hlavním cílem pak bylo vytvořit aplikaci, která bude administrátorům poskytovat možnost prohlížet všechna data uložená v databázi SSSD.
|
|
|
Analysis of security and authentication of wireless networks
Kulíř, Tomáš ; Jeřábek, Jan (referee) ; Szőcs, Juraj (advisor)
This master's thesis deals with wireless networks, mainly about the WiFi. It deals with summary of individual security mechanism both theoretically and using them in real hardware. Mainly it is interested in the security of the individual mechanisms and their weaknesses, which cause rupture of security. At each chapter the ideas and methods, that the attackers are trying for infiltration of wireless networks and decrypt encryption WEP, WPA or WPA2, are outlined. The principle of the authentication of the WiFi by the authentication server and its options, which is connected with directory service LDAP, is also explained in this thesis. The penultimate chapter deals with the summary of security mechanisms and references that should be adhered by design of the WiFi for the provision of the high security. The ending of the master's thesis is devoted to social engineering and its most famous representatives.
|
guest ::
