一、LDAP服务器搭建(参考文章http://blog.csdn.net/iceman1952/article/details/37997717)
1、环境准备:
服务器系统:Ubuntu 13-32bit
LDAP服务器:BerkeleyDB http://download.oracle.com/otn/berkeley-db/db-6.1.19.zip
openldap ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-2.4.39.tgz
2、安装BerkeleyDB6.1
unzip db-6.1.19.zip
cd db-6.1.19/build_unix/
../dist/configure
sudo make
sudo make install
sudo vim /etc/ld.so.conf
(在最后面加上一行 /usr/local/BerkeleyDB.6.1/lib)
sudo ldconfig -v
BerkeleyDB6.1安装完毕,安装路径:/usr/local/BerkeleyDB.6.1/lib
3.安装openldap-2.4.39
tar xvf openldap-2.4.39.tgz
cd openldap-2.4.39/
sudo ./configure CPPFLAGS="-I/usr/local/BerkeleyDB.6.1/include -D_GNU_SOURCE" LDFLAGS="-L/usr/local/BerkeleyDB.6.1/lib"
sudo make depend
sudo make
sudo make install
openldap-2.4.39 安装完毕,安装路径:/usr/local/etc/openldap
4.测试是否安装成功
(1)简单配置slapd.conf
sudo vim /usr/local/etc/openldap/slapd.conf
修改如下部分为下:
suffix "dc=example,dc=com"
rootdn "cn=Manager,dc=example,dc=com"
(2)启动slapd
su root -c /usr/local/libexec/slapd
(3)建立一个文件example.ldif,内容如下:
dn: dc=example,dc=com
objectclass: dcObject
objectclass: organization
o: Example Company
dc: example
dn: cn=Manager,dc=example,dc=com
objectclass: organizationalRole
cn: Manager
将文件中的内容插入到LDAP服务器中,然后查询此记录
ldapadd -x -D "cn=Manager,dc=example,dc=com" -W -f example.ldif
ldapsearch -x -b 'dc=example,dc=com' '(objectclass=*)&