OpenLDAP基础安装配置

转自：http://blog.sina.com.cn/s/blog_472b9eb20100ni0m.html

include         /usr/local/openldap/etc/openldap/schema/core.schema
include         /usr/local/openldap/etc/openldap/schema/corba.schema
include         /usr/local/openldap/etc/openldap/schema/cosine.schema
include         /usr/local/openldap/etc/openldap/schema/inetorgperson.schema
include         /usr/local/openldap/etc/openldap/schema/misc.schema
include         /usr/local/openldap/etc/openldap/schema/openldap.schema
include         /usr/local/openldap/etc/openldap/schema/nis.schema
include         /usr/local/openldap/etc/openldap/schema/samba.schema

引入schema文件的顺序如上。

然后是修改BaseDN和密码策略，然后init一个目录

dn: dc=ultra,dc=com
objectClass: top
objectClass: domain
objectClass: dcObject
dc: ultra
o: ultra.com
description:  ultra.com ldap

dn: ou=users,dc=ultra,dc=com
ou: users
objectClass: organizationalUnit

dn: ou=groups,dc=ultra,dc=com
ou: groups
objectClass: organizationalUnit

dn: ou=apps,dc=ultra,dc=com
ou: apps
objectClass: organizationalUnit

dn: uid=test,ou=users,dc=ultra,dc=com
cn: test
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetorgperson
objectClass: uidObject
sn: test
uid: test
userpassword: ao3qoq
mail: test@126.com
telephoneNumber: 371-6338-3522

dn: uid=Tom Black,ou=users,dc=ultra,dc=com
cn: Tom Black
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetorgperson
objectClass: uidObject
sn: Tom Black
uid: Tom Black
mail: tom@126.com
telephoneNumber: 371-6338-3522

dn: uid=Jerry Smith,ou=users,dc=ultra,dc=com
cn: Jerry Smith
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetorgperson
objectClass: uidObject
sn: Smith
uid: Jerry Smith
mail: jerry@sina.com
telephoneNumber: 371-6338-3521

dn: cn=ultraadmins,ou=groups,dc=ultra,dc=com
objectclass: groupOfUniqueNames
objectclass: top
cn: ultraadmins
uniquemember: uid=test,ou=users,dc=ultra,dc=com
uniquemember: uid=Tom Black,ou=users,dc=ultra,dc=com
uniquemember: uid=Jerry Smith,ou=users,dc=ultra,dc=com

dn: cn=poweradmins,ou=groups,dc=ultra,dc=com
objectclass: groupOfUniqueNames
objectclass: top
cn: poweradmins
uniquemember: uid=test,ou=users,dc=ultra,dc=com
uniquemember: uid=Tom Black,ou=users,dc=ultra,dc=com

dn: cn=thirdadmins,ou=groups,dc=ultra,dc=com
objectclass: groupOfUniqueNames
objectclass: top
cn: thirdadmins
uniquemember: uid=test,ou=users,dc=ultra,dc=com
uniquemember: uid=Tom Black,ou=users,dc=ultra,dc=com