Configure LDAP Server
2017/04/23 |
Configure LDAP Server to share users' accounts in local network.
|
|
[1] | Install OpenLDAP. |
root@dlp:~#
apt -y install slapd ldap-utils # set LDAP admin password during installation like follows +-------------------------------------------------| Configuring slapd |--+ | Please enter the password for the admin entry in your LDAP directory. | | | | Administrator password: | | | | ********______________________________________________________________ | | | | <Ok> | | | +------------------------------------------------------------------------+ # confirm settings root@dlp:~# slapcat dn: dc=srv,dc=world objectClass: top objectClass: dcObject objectClass: organization o: srv.world dc: srv structuralObjectClass: organization entryUUID: 1098490a-bab3-1036-894e-c3f4101f0ccf creatorsName: cn=admin,dc=srv,dc=world createTimestamp: 20170421075125Z entryCSN: 20170421075125.770290Z#000000#000#000000 modifiersName: cn=admin,dc=srv,dc=world modifyTimestamp: 20170421075125Z dn: cn=admin,dc=srv,dc=world objectClass: simpleSecurityObject objectClass: organizationalRole cn: admin description: LDAP administrator userPassword:: e1NTSEF9cWlLU0UxMjQ4SElKNk83VXd0ZDMvdExQWUNMWHJ6Qis= structuralObjectClass: organizationalRole entryUUID: 109e636c-bab3-1036-894f-c3f4101f0ccf creatorsName: cn=admin,dc=srv,dc=world createTimestamp: 20170421075125Z entryCSN: 20170421075125.810327Z#000000#000#000000 modifiersName: cn=admin,dc=srv,dc=world modifyTimestamp: 20170421075125Z |
[2] | Add base dn. |
root@dlp:~#
vi base.ldif # create new # change to your own suffix for the field [dc=srv,dc=world] dn: ou=people,dc=srv,dc=world objectClass: organizationalUnit ou: people dn: ou=groups,dc=srv,dc=world objectClass: organizationalUnit ou: groups ldapadd -x -D cn=admin,dc=srv,dc=world -W -f base.ldif Enter LDAP Password: # LDAP admin password (set in installation of openldap) adding new entry "ou=people,dc=srv,dc=world" adding new entry "ou=groups,dc=srv,dc=world" |