Install and Configure OpenLDAP server on CentOS7

Поділитися
Вставка
  • Опубліковано 11 лют 2025
  • This video will walk you through the installation and configuration of OpenLDAP server on centOS 7.4
    The commands / files that I used in configurstion.
    #--db.ldif---!
    dn: olcDatabase={2}hdb,cn=config
    changetype: modify
    replace: olcSuffix
    olcSuffix: dc=hadoop,dc=com
    dn: olcDatabase={2}hdb,cn=config
    changetype: modify
    replace: olcRootDN
    olcRootDN: cn=ldapadm,dc=hadoop,dc=com
    dn: olcDatabase={2}hdb,cn=config
    changetype: modify
    replace: olcRootPW
    olcRootPW: {SSHA}/C9pu+P5jvTbQ+6hRIopbfiC8WxyMalo
    #----------------------------------------#
    ldapmodify -Y EXTERNAL -H ldapi:/// -f db.ldif
    #---------------------monitor.ldif-------------------#
    dn: olcDatabase={1}monitor,cn=config
    changetype: modify
    replace: olcAccess
    olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external, cn=auth" read by dn.base="cn=ldapadm,dc=hadoop,dc=com" read by * none
    #--------------------------
    olcDatabase\=\{1\}monitor.ldif
    ldapmodify -Y EXTERNAL -H ldapi:/// -f monitor.ldif
    cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG
    chown ldap:ldap /var/lib/ldap/*
    ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/cosine.ldif
    ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/nis.ldif
    ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/inetorgperson.ldif
    #-----------------base.ldif --------------------#
    dn: dc=hadoop,dc=com
    dc: hadoop
    objectClass: top
    objectClass: domain
    dn: cn=ldapadm,dc=hadoop,dc=com
    objectClass: organizationalRole
    cn: ldapadm
    description: LDAP Manager
    dn: ou=People,dc=hadoop,dc=com
    objectClass: organizationalUnit
    ou: People
    dn: ou=Group,dc=hadoop,dc=com
    objectClass: organizationalUnit
    ou: Group
    #------------------------------------
    ldapadd -x -W -D "cn=ldapadm,dc=hadoop,dc=com" -f base.ldif
    ldapsearch -D cn="ldapadm,dc=hadoop,dc=com" -W -b "dc=hadoop,dc=com" objectClass=*

КОМЕНТАРІ • 34