OpenLDAP自定义schema

最新推荐文章于 2023-08-18 15:24:02 发布

shibushi114

最新推荐文章于 2023-08-18 15:24:02 发布

阅读量384

点赞数

分类专栏： java java与开源框架文章标签：服务器运维

本文链接：https://blog.csdn.net/shibushi114/article/details/125784433

版权

java 同时被 2 个专栏收录

18 篇文章 1 订阅

订阅专栏

java与开源框架

13 篇文章 0 订阅

订阅专栏

attributetype ( 1.3.6.1.4.1.7914.1.2.1.1
	NAME 'userName'
	DESC 'name of the user on the system'
	EQUALITY caseIgnoreMatch
	SUBSTR caseIgnoreSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
	SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.7914.1.2.1.2
	NAME 'accountIsLocked'
	DESC 'accountIsLocked'
        EQUALITY booleanMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
	SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.7914.1.2.1.3
	NAME 'accountCreateDate'
	DESC 'accountCreateDate'
	EQUALITY generalizedTimeMatch
	ORDERING generalizedTimeOrderingMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
	SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.7914.1.2.1.4
	NAME 'accountDisabled'
	DESC 'accountDisabled'
        EQUALITY booleanMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
	SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.7914.1.2.1.5
	NAME 'accountExpireDate'
	DESC 'accountExpireDate'
	EQUALITY generalizedTimeMatch
	ORDERING generalizedTimeOrderingMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
	SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.7914.1.2.1.6
	NAME 'accountIsAdmin'
	DESC 'accountIsAdmin'
        EQUALITY booleanMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
	SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.7914.1.2.1.7
	NAME 'accountLastLoginDate'
	DESC 'Accountlastlogindate'
	EQUALITY generalizedTimeMatch
	ORDERING generalizedTimeOrderingMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
	SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.7914.1.2.1.9
	NAME 'accountCreator'
	DESC 'Creator'
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
	SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.7914.1.2.1.10
	NAME 'accountid'
	EQUALITY caseIgnoreMatch
	SUBSTR caseIgnoreSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
	SINGLE-VALUE )

objectclass ( 1.3.6.1.4.1.7914.1.2.2.1 NAME 'rbacUser'
	DESC 'rbac User'
	SUP top AUXILIARY
	MUST ( userName $ accountid )
	MAY ( accountExpireDate $ accountIsLocked $ accountCreateDate $ accountDisabled $ accountIsAdmin $ Accountlastlogindate $ accountCreator )
	)

在/etc/openldap/schema目录增加，然后重新生成

slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d/

ldapadd -Q -Y EXTERNAL -H ldapi:/// -f memberof_config.ldif
ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f  refint1.ldif
ldapadd -Q -Y EXTERNAL -H ldapi:/// -f  refint2.ldif


ldapadd -Q -Y EXTERNAL -H ldapi:/// -f add_module_group.ldif
ldapadd -Q -Y EXTERNAL -H ldapi:/// -f add_group_objectClass.ldif


ldapsearch -x -LLL -H ldap:/// -b uid=yanfh,ou=people,dc=kindo,dc=com,dc=cn memberof


ldapadd -Q -Y EXTERNAL -H ldapi:/// -f test.ldif



ldapadd -D "cn=admin,dc=kindo,dc=com,dc=cn" -W -x -f jirauser.ldif


slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d/
chown -R ldap:ldap /etc/openldap/slapd.d && chmod -R 700 /etc/openldap/slapd.d