centos7 openldap编译安装(含部署日志)

########################################

OS:CentOS Linux release 7.3.1611 (Core)

db:berkeleydb-5.1.29

ldap:openldap-2.4.48

########################################

相关软件下载
openldap下载
http://www.openldap.org/software/download/

参考资料
https://www.cnblogs.com/littlehb/p/7883302.html

下载地址：
ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-2.4.48.tgz

berkeley-db下载
https://download.oracle.com/berkeley-db/db-5.1.29.tar.gz

ldap admin下载
http://www.ldapbrowser.com/download.htm

下载地址：
https://downloads.softerra.com/ldapadmin/ldapadmin-4.17.20304.0-x64-eng.msi

##############################

解压

tar -zxvf db-5.1.29.tar.gz

进入编译目录

cd build_unix/

配置

…/dist/configure --prefix=/usr/local/berkeleydb-5.1.29

编译

make
make install

查看是否安装成功

ls /usr/local/berkeleydb-5.1.29/

库文件连接创建

echo “/usr/local/berkeleydb-5.1.29/lib/” > /etc/ld.so.conf

配置查看

ldconfig -v

##############################

##############################

解压文件

tar -zxvf openldap-2.4.48.tgz

进入软件目录

cd openldap-2.4.48

配置

./configure --prefix=/usr/local/openldap-2.4.48 --enable-syslog --enable-modules --enable-debug --with-tls CPPFLAGS=-I/usr/local/berkeleydb-5.1.29/include/ LDFLAGS=-L/usr/local/berkeleydb-5.1.29/lib/

编译安装

make depend
make
make install

进入安装目录

cd /usr/local/openldap-2.4.48

添加执行命令

ln -s /usr/local/openldap-2.4.48/bin/* /usr/local/bin/
ln -s /usr/local/openldap-2.4.48/sbin/* /usr/local/sbin/

设置ldap密码

slappasswd

输入:troll2019

输出:{SSHA}sNz4cLinT82kLGIWInVOVZ85NHfTnA8H

进入配置文件目录

cd etc/openldap/

备份配置文件

cp slapd.conf slapd.conf.bak.20190731

编辑配置文件

vi slapd.conf

add

include /usr/local/openldap-2.4.48/etc/openldap/schema/collective.schema
include /usr/local/openldap-2.4.48/etc/openldap/schema/corba.schema
include /usr/local/openldap-2.4.48/etc/openldap/schema/cosine.schema
include /usr/local/openldap-2.4.48/etc/openldap/schema/duaconf.schema
include /usr/local/openldap-2.4.48/etc/openldap/schema/dyngroup.schema
include /usr/local/openldap-2.4.48/etc/openldap/schema/inetorgperson.schema
include /usr/local/openldap-2.4.48/etc/openldap/schema/java.schema
include /usr/local/openldap-2.4.48/etc/openldap/schema/misc.schema
include /usr/local/openldap-2.4.48/etc/openldap/schema/nis.schema
include /usr/local/openldap-2.4.48/etc/openldap/schema/openldap.schema
include /usr/local/openldap-2.4.48/etc/openldap/schema/pmi.schema
include /usr/local/openldap-2.4.48/etc/openldap/schema/ppolicy.schema

update

suffix “dc=sysadmin,dc=com”
rootdn “cn=admin,dc=sysadmin,dc=com”

update

rootpw {SSHA}sNz4cLinT82kLGIWInVOVZ85NHfTnA8H

add

loglevel 256
logfile /usr/local/openldap-2.4.48/var/slapd.log

进入数据目录

cd …/var/openldap-data/

复制数据文件

cp DB_CONFIG.example DB_CONFIG

启动服务

/usr/local/openldap-2.4.48/libexec/slapd

验证服务进程

ps -ef | grep openldap
sudo netstat -anp | grep 389

输出debug

/usr/local/openldap-2.4.48/libexec/slapd -d 256

vi sysadmin.ldif

dn: dc=sysadmin,dc=com
objectclass: dcObject
objectclass: organization
o: SYS.Inc
dc: sysadmin

dn: cn=admin,dc=sysadmin,dc=com
objectclass: organizationalRole
cn: admin

新增节点

ldapadd -x -D “cn=admin,dc=sysadmin,dc=com” -W -f sysadmin.ldif

vi bigdata.ldif

add bigdata

dn: ou=bigdata, dc=sysadmin,dc=com
changetype: add
objectclass: top
objectclass: organizationalUnit
ou: bigdata

dn: cn=troll,ou=bigdata,dc=sysadmin,dc=com
changetype: add
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
cn: troll
sn: troll
ou: bigdata
description: sb, sx
description: sx
uid: troll

新增节点

ldapmodify -xWD ‘cn=admin,dc=sysadmin,dc=com’ -f bigdata.ldif

##############################

效果

LDIF修改LDAP记录或配置示例

https://www.linuxidc.com/Linux/2017-10/147559.htm

tips：部署日志和相关安装包分享
链接：https://pan.baidu.com/s/15KOK28qu5l3znQpcJj1utQ
提取码：yo5d