ldap - 设置一个基本的OpenLDAP Server

参考：http://linux.sheup.com/linux/linux2345.htm

1. Download the newest versionOpenLDAP:

http://www.openldap.org/software/download/OpenLDAP/openldap-release/

2. Run the following command:

#tar cvfz openldap-stable-20010524.tgz

#cd openldap-2.0.11

#./configure

#make depend

#make

#make test

#make install

when processing comfigure,having the error: BerkeleyDB not available, download BerkeleyDB in here , the related command is following:

# unzip db-4.8.24.zip

# cd db-4.8.24

# cd build_unix/

# ../dist/configure

# make

# make install

#exportCPPFLAGS="-I/usr/local/BerkeleyDB.4.8/include"

exportLDFLAGS="-L/usr/local/lib -L/usr/local/BerkeleyDB.4.8/lib-R/usr/local/BerkeleyDB.4.8/lib"

#exportLD_LIBRARY_PATH="/usr/local/BerkeleyDB.4.8/lib"

Configration:

1) 更改配置文件/usr/local/etc/openldap/slapd.conf

在include/usr/local/etc/openldap/schema/core.schema这行后面加上下面的行，包括所有的方案(Remove the schemaconfigration if the schema file is not exist in /usr/local/etc/openldap/schema)。

include/usr/local/etc/openldap/schema/collective.schema

include/usr/local/etc/openldap/schema/corba.schema

include/usr/local/etc/openldap/schema/core.schema

include/usr/local/etc/openldap/schema/cosine.schema

include/usr/local/etc/openldap/schema/duaconf.schema

include /usr/local/etc/openldap/schema/dyngroup.schema

include/usr/local/etc/openldap/schema/inetorgperson.schema

include/usr/local/etc/openldap/schema/java.schema

include/usr/local/etc/openldap/schema/misc.schema

include/usr/local/etc/openldap/schema/nis.schema

include/usr/local/etc/openldap/schema/openldap.schema

include/usr/local/etc/openldap/schema/pmi.schema

include/usr/local/etc/openldap/schema/ppolicy.schema

2) 在文件slapd.conf的"ldbmdatabase definitions"部分更改相应的suffix,rootdn行如下

database ldbm

suffix"o=yourdomain,c=us"

rootdn"cn=root,o=yourdomain,c=us"

rootpw secret

directory/usr/local/var/openldap-ldbm

有各种格式你可以用，这里我用的是o=yourdomain,c=us说明你的公司域名和所在的国家或地区。

rootdn的格式安装后默认为cn=Manager,这里改为root完全是自己的喜好,这样符合Unix/Linux中root具有最高权限的传统。

3) 现在可以启动slapd了，运行/usr/local/libexec/slapd。

可以考虑把/usr/local/bin and/usr/local/libexec加到搜索路径中，即加到/etc/profile

中的PATH行:

PATH="$PATH:/usr/X11R6/bin:/usr/local/bin:/usr/local/libexec"

这样下次登录后只需键入 slapd 。

4) 测试ldap server是否正常工作。(thethree method both are worked.)

运行下面的命令检查是否有相应的输出。

ldapsearch -x -b '' -s base'(objectclass=*)' namingContexts

或者

ldapsearch -x -b '' -s base'(objectclass=*)'

5) 编辑.ldif文本文件，用ldapadd添加记录进入LDAP数据库。

文件内容如下：

dn: o=yourdomain,c=us
objectclass:dcobject
objectclass:organization
o:yourdomain
dc:yourdomain

dn:cn=Jephe Wu,o=yourdomain,c=us
objectclass:inetorgperson
cn: JepheWu
sn: Wu
mail:jephe_wu@yourdomain.com