Setup Ldap Server

From wiki.breedveld.net
Jump to: navigation, search

Install packages:

apt-get install ldap-utils migrationtools slapd unixodbc
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif

Create backend.ldif:

ldapadd -Y EXTERNAL -H ldapi:/// -f ./backend.ldif
ldapadd -x -D cn=admin,dc=breedveld,dc=home -W -f frontend.ldif

ldapadduser george example sudo ldapaddgroup qa ldapaddusertogroup george qa ldapdeleteuserfromgroup george qa

generate hash

slappasswd
slappasswd -7

Change Admin password:

sudo ldapmodify -Y EXTERNAL -H ldapi:///
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=....
SASL SSF: 0
dn: olcDatabase={1}hdb,cn=config
replace: olcRootPW
olcRootPW: {MD5}BNrIr+DKdfwe:wqtZva1zlrQ==

modifying entry "olcDatabase={1}hdb,cn=config"

Some commands

ldapdelete -x -w secret -D "cn=admin,dc=breedveld,dc=home" "uid=roland,ou=people,dc=breedveld,dc=home"
ldapdelete -x -w secret -D "cn=admin,dc=breedveld,dc=home" "cn=roland,ou=groups,dc=breedveld,dc=home"