ldap安装2

https://www.cnblogs.com/lemon-le/p/6266921.html

openldap-2.4.44
安装相关组件和服务
yum install -y openldap-servers-2.4.44-21.el7_6.x86_64 openldap-clients-2.4.44-21.el7_6.x86_64 migrationtools-47-15.el7.noarch # openldap-servers-2.4.44-21.el7_6.x86_64
slappasswd
new password:  123456
re-enter new password:123456
{SSHA}UyHi1nCn/4vOUMDrvKznPlMiSN4Fu/gs

cd /etc/openldap/slapd.d/cn\=config
这里需要修改两个文件
vi olcDatabase\=\{2\}hdb.ldif
增加一行
olcRootPW: {SSHA}Vb/Jm2wN1RO3lS+cSh8pzzPSxZzlpf3D
修改域信息
olcSuffix: dc=luoye,dc=site
olcRootDN: cn=Manager,dc=luoye,dc=site

vi olcDatabase={1}monitor.ldif
al,cn=auth" read by dn.base="cn=Manager,dc=luoye,dc=site" read by * none

进行数据库文件设置，拷贝DB_CONFIG 文件到指定目录
cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG
chown -R ldap:ldap /var/lib/ldap
chown -R ldap:ldap /etc/openldap/

slaptest -u

启动并设置开机启动
systemctl start slapd
systemctl enable slapd

基础Schema导入
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/cosine.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/nis.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/inetorgperson.ldif

2.配置ldap可视化ui ldap-account-manager
官网下载https://www.ldap-account-manager.org/lamcms/releases
http://www.mirrorservice.org/
下载 ldap-account-manager-6.7.tar.bz2
tar -xjf ldap-account-manager-6.7.tar.bz2

rpm -Uvh https://mirror.webtatic.com/yum/el7/epel-release.rpm 
rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
yum install -y php56w.x86_64 php56w-cli.x86_64 php56w-common.x86_64 php56w-gd.x86_64 php56w-ldap.x86_64

mkdir -p /var/www/html/lam/ldap/
chown -R apache:apache /var/www/html/lam

更改ldap-account-manager 配置
cp /var/www/html/lam/ldap/config/config.cfg.sample /var/www/html/lam/ldap/config/config.cfg
cp /var/www/html/lam/ldap/config/unix.conf.sample /var/www/html/lam/ldap/config/unix.conf
vi /var/www/html/lam/ldap/config/config.cfg
default:unix
vi /var/www/html/lam/ldap/config/unix.conf
替换所有的yourdomain为你自己的域名

重启httpd服务
service httpd restart

ldap 备份和还原

ldapsearch -x -D "cn=manager,dc=luoye,dc=site" -w 123456 -b dc=luoye,dc=site > ldapdata.ldif
ldapadd -x -D "cn=manager,dc=luoye,dc=site" -w 123456 -f  ldapdata.ldif

备份

slapcat -v -l ldapdata.ldif

还原

cat >slapcat.regex <<EOF
/^creatorsName: /d
/^createTimestamp: /d
/^modifiersName: /d
/^modifyTimestamp: /d
/^structuralObjectClass: /d
/^entryUUID: /d
/^entryCSN: /d
EOF
	cat slapdata.ldif | sed -f slapcat.regex > slapdata.ldif
	ldapadd -x -D "cn=manager,dc=luoye,dc=site" -w 123456 -f slapdata.ldif -c

ldap 清空数据

ldapdelete  -x -D "cn=manager,dc=luoye,dc=site" -w 123456  -r 'dc=luoye,dc=site'