Description
...
Usage
...
Configuration
...
Server
aptitude install slapd ldap-utils
slapd
debconf
- Omit OpenLDAP server configuration: no
- DNS domain name: ps.uni-saarland.de
- Organization Name: Programming Systems Lab
Administrator password: <hidden>
Confirm password: <hidden>
- Database backend to use: HDB
- Do you want the database to be removed when slapd is purged?: Yes
- Allow LDAPv2 protocol: No
/etc/default/slapd
-# SLAPD_SERVICES="ldap://127.0.0.1:389/ ldaps:/// ldapi:///" +SLAPD_SERVICES="ldap://127.0.0.1:389/ ldaps:/// ldapi:///"
/etc/ldap/slapd.conf
# Indexing options for database #1 index objectClass eq +index uidNumber,gidNumber eq +index cn,uid pres,sub,eq +index ou,memberUid,uniqueMember pres,eq
julius #1 [0]: ~ # /etc/init.d/slapd stop Stopping OpenLDAP: slapd. julius #2 [0]: ~ # slapindex;chown -R openldap:openldap /var/lib/ldap WARNING! Runnig as root! There's a fair chance slapd will fail to start. Check file permissions! julius #3 [0]: ~ # /etc/init.d/slapd start Starting OpenLDAP: slapd. julius #4 [0]: ~ #
/etc/ldap/ldap.conf
-#BASE dc=example,dc=com +BASE dc=ps,dc=uni-saarland,dc=de
SSL
- created ldap.ps.uni-saarland.de.{crt,key} in /etc/ldap
- chown root:openldap /etc/ldap/ldap.ps.uni-saarland.de.{crt,key}
- chmod 0640 /etc/ldap/ldap.ps.uni-saarland.de.{crt,key}
/etc/ldap/slapd.conf
+# TLS/SSL configuration +TLSCertificateFile /etc/ldap/ldap.ps.uni-saarland.de.crt +TLSCertificateKeyFile /etc/ldap/ldap.ps.uni-saarland.de.key +TLSVerifyClient 0 +
aptitude install ldapscripts
libpam-lapd
debconf
- LDAP server Uniform Resource Identifier: ldapi:///
- Distinguished name of the search base: dc=ps,dc=uni-saarland,dc=de
- LDAP version to use: 3
- Make local root Database admin: no
- Does the LDAP database require login? no
- Local crypt to use when changing passwords: crypt
ldap schema
- added child entries ou=Group and ou=People under dc=ps,dc=uni-saarland,dc=de
/etc/pam.d/
--- /etc/pam.d/common-account (revision 51) +++ /etc/pam.d/common-account (local) +account sufficient pam_ldap.so account required pam_unix.so --- /etc/pam.d/common-auth (revision 51) +++ /etc/pam.d/common-auth (local) +auth sufficient pam_ldap.so auth required pam_unix.so nullok_secure --- /etc/pam.d/common-password (revision 51) +++ /etc/pam.d/common-password (local) -password required pam_unix.so nullok obscure md5 +password sufficient pam_unix.so nullok obscure md5 +password required pam_ldap.so
dhcpd
cp -i /usr/share/doc/dhcp3-server-ldap/dhcp.schema.gz /etc/ldap/schema/; gunzip /etc/ldap/schema/dhcp.schema.gz
/etc/ldap/slapd.conf
+include /etc/ldap/schema/dhcp.schema
Client
aptitude install -R nscd libnss-ldapd
libnss-ldapd
debconf
- LDAP server URI: ldapi:///
- LDAP server search base: dc=ps,dc=uni-saarland,dc=de
LDAP database user: <empty>
- Name services to configure: group, networks, passwd, shadow