OpenLDAP安装及配置

最新推荐文章于 2022-07-22 16:56:32 发布

原创最新推荐文章于 2022-07-22 16:56:32 发布 · 579 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#ldap #数据库 #运维

LDAP 专栏收录该内容

1 篇文章

订阅专栏

本文详细介绍了如何在Linux环境下安装并配置开放ldap服务，包括安装、配置slapd.config、设置密码、生成目录、修改权限以及启动slapd服务等步骤，并通过telnet和ldapsearch验证服务是否正常运行。

1.安装

1.1 查看

# yum list | grep openldap

1.2 安装

# yum install openldap*

2.配置

2.1 创建slapd.config配置文件

# cp /usr/share/openldap-servers/slapd.conf.obsolete /etc/openldap/slapd.conf

2.2 修改密码

# slappasswd 
New password: secret
Re-enter new password: secret
{SSHA}Hy/MUWmZlIXWawK6uZxWprMU0FErCLnU

2.3 修改slapd.config文件

# vi /etc/openldap/slapd.conf

修改dc和rootpw,如下:

改前:

database        bdb
suffix          "dc=my-domain,dc=com"
checkpoint      1024 15
rootdn          "cn=Manager,dc=my-domain,dc=com"
# Cleartext passwords, especially for the rootdn, should
# be avoided.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
# rootpw                secret
# rootpw                {crypt}ijFYNcSNctBYg

改后:

database        bdb
suffix          "dc=my-domain,dc=com"
checkpoint      1024 15
rootdn          "cn=Manager,dc=my-domain,dc=com"
# Cleartext passwords, especially for the rootdn, should
# be avoided.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
# rootpw                secret
rootpw                {SSHA}Hy/MUWmZlIXWawK6uZxWprMU0FErCLnU

2.4 重新生成/etc/openldap/slapd.d目录

# rm -rf slapd.d/*

# slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d
bdb_db_open: warning - no DB_CONFIG file found in directory /var/lib/ldap: (2).
Expect poor performance for suffix "dc=my-domain,dc=com".
bdb_db_open: database "dc=my-domain,dc=com": db_open(/var/lib/ldap/id2entry.bdb) failed: No such file or directory (2).
backend_startup_one (type=bdb, suffix="dc=my-domain,dc=com"): bi_db_open failed! (2)
slap_startup failed (test would succeed using the -u switch)

2.5 修改/etc/openldap/slapd.d/目录权限

# chown ldap:ldap -R /etc/openldap/slapd.d

2.6 修改/var/lib/ldap/目录权限

# chown ldap:ldap -R /var/lib/ldap/

3. 启动slapd服务

# /etc/init.d/slapd start
ln: creating hard link `/var/run/slapd.pid': File exists   [  OK  ]

# telnet localhost 389
Trying ::1...
Connected to localhost.
Escape character is '^]'.

# ldapsearch -x
# extended LDIF
#
# LDAPv3
# base <> (default) with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 32 No such object

未完待续...