码迷,mamicode.com
首页 > 其他好文 > 详细

CentOS7 LDAP 2.4 安装配置

时间:2017-06-26 18:05:18      阅读:116      评论:0      收藏:0      [点我收藏+]

标签:roo   csu   object   cdata   nts   生成   xxxxx   access   blog   

软件安装

# yum -y install openldap-servers openldap-clients

# systemctl start slapd

# systemctl enable slapd

 

密码修改

# slappasswd

New password:

Re-enter new password:

{SSHA}xxxxxxxxxxxxxxxxxxxxxxxx

# vim chrootpw.ldif

# specify the password generated above for "olcRootPW" section

dn: olcDatabase={0}config,cn=config

changetype: modify

add: olcRootPW

olcRootPW: {SSHA}xxxxxxxxxxxxxxxxxxxxxxxx // copy above

# ldapadd -Y EXTERNAL -H ldapi:/// -f chrootpw.ldif

 

 

基础Schema导入

# ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/cosine.ldif

# ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/nis.ldif

# ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/inetorgperson.ldif

 

 Ldap域数据生成

vim chdomain.ldif

# less chdomain.ldif 
# replace to your own domain name for "dc=***,dc=***" section
dn:olcDatabase={2}hdb,cn=config
changetype:modify
replace:olcSuffix
olcSuffix:dc=cnicg,dc=cn

dn:olcDatabase={2}hdb,cn=config
changetype:modify
replace:olcRootDN
olcRootDN:cn=Manager,dc=cnicg,dc=cn

dn: olcDatabase={1}monitor,cn=config
changetype:modify
replace:olcAccess
olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" read by dn.base="cn=Manager,dc=cnicg,dc=cn" read by * none

 

# ldapmodify -Y EXTERNAL -H ldapi:/// -f chdomain.ldif

 

基础域数据

vim basedomain.ldif

# replace to your own domain name for "dc=***,dc=***" section

dn: dc=cnicg,dc=cn
objectClass: top
objectClass: dcObject
objectclass: organization
o: cnicg cn
dc: cnicg

 

dn: cn=Manager,dc=cnicg,dc=cn
objectClass: organizationalRole
cn: Manager
description: Directory Manager

dn: ou=People,dc=cnicg,dc=cn
objectClass: organizationalUnit
ou: People
 
dn: ou=Group,dc=cnicg,dc=cn
objectClass: organizationalUnit
ou: Group

 

# ldapadd -x -D cn=Manager,dc=cnicg,dc=cn -W -f basedomain.ldif

 

CentOS7 LDAP 2.4 安装配置

标签:roo   csu   object   cdata   nts   生成   xxxxx   access   blog   

原文地址:http://www.cnblogs.com/fatt/p/7081635.html

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!