OpenLDAP服务端+PhpLdapAdmin 基本安装与配置

转载：http://blog.csdn.net/post_yuan/article/details/53129735

>[root@ha-3yum.repos.d]#cp/usr/share/openldap-servers/DB_CONFIG.example/var/lib/ldap/DB_CONFIG
1. [root@ha-3yum.repos.d]#cp/usr/share/openldap-servers/slapd.conf.obsolete/etc/openldap/slapd.conf>

3 生成ldap管理员密码

>[root@ha-3yum.repos.d]#slappasswd-sldap123
1. {SSHA}iVje00GFFMDTkymLvxTF3lA7aRgiWRwZ>

4 修改slapd.conf，主要配置dc和rootpw，rootpw配置为上述步骤中的密码

>databasebdb
1. suffix"dc=esgyn,dc=com"
2. checkpoint102415
3. rootdn"cn=Manager,dc=esgyn,108); list-style-type:decimal-leading-zero; color:inherit; line-height:18px; margin:0px!important; padding:0px 3px 0px 10px!important; list-style-position:outside!important"> #Cleartextpasswords,especiallyfortherootdn,should
4. #beavoided.Seeslappasswd(8)andslapd.conf(5)fordetails.
5. #USEOfstrongauthenticationencouraged.
6. #rootpwsecret
7. #rootpw{crypt}ijFYNcSNctBYg
8. rootpw{SSHA}iVje00GFFMDTkymLvxTF3lA7aRgiWRwZ>

5 检测并重新生成ldap数据库

>[root@cent-1slapd.d]#ls
1. cn=configcn=config.ldif
2. [root@cent-1slapd.d]#rm-rf*
3. [root@cent-1slapd.d]#slaptest-f/etc/openldap/slapd.conf-F/etc/openldap/slapd.d/
4. configfiletestingsucceeded>

6 修改相关ldap文件权限

>[root@ha-3yum.repos.d]#chown-Rldap:ldap/var/lib/ldap/
1. [root@ha-3yum.repos.d]#chown-Rldap:ldap/etc/openldap/>

7 启动slapd服务

>[root@cent-1~]#serviceslapdstatus
1. slapdisstopped
2. [root@cent-1~]#serviceslapdstart
3. Startingslapd:[OK]>

>[root@cent-1slapd.d]#yuminstallmigrationtools-y>

>#DefaultDNSdomain
1. $DEFAULT_MAIL_DOMAIN="esgyn.com";
3. #Defaultbase
4. $DEFAULT_BASE="dc=esgyn,dc=com";
5. >

>[root@cent-1slapd.d]#/usr/share/migrationtools/migrate_base.pl>base.ldif>

>[root@cent-1migrationtools]#ldapadd-x-D"cn=Manager,dc=com"-W-f./base.ldif
1. EnterLDAPPassword:
2. addingnewentry"dc=esgyn,dc=com"
4. addingnewentry"ou=Hosts,108); list-style-type:decimal-leading-zero; color:inherit; line-height:18px; margin:0px!important; padding:0px 3px 0px 10px!important; list-style-position:outside!important"> addingnewentry"ou=Rpc,108); list-style-type:decimal-leading-zero; color:inherit; line-height:18px; margin:0px!important; padding:0px 3px 0px 10px!important; list-style-position:outside!important"> addingnewentry"ou=Services,108); list-style-type:decimal-leading-zero; color:inherit; line-height:18px; margin:0px!important; padding:0px 3px 0px 10px!important; list-style-position:outside!important"> addingnewentry"nisMapName=netgroup.byuser,108); list-style-type:decimal-leading-zero; color:inherit; line-height:18px; margin:0px!important; padding:0px 3px 0px 10px!important; list-style-position:outside!important"> addingnewentry"ou=Mounts,108); list-style-type:decimal-leading-zero; color:inherit; line-height:18px; margin:0px!important; padding:0px 3px 0px 10px!important; list-style-position:outside!important"> addingnewentry"ou=Networks,108); list-style-type:decimal-leading-zero; color:inherit; line-height:18px; margin:0px!important; padding:0px 3px 0px 10px!important; list-style-position:outside!important"> addingnewentry"ou=People,108); list-style-type:decimal-leading-zero; color:inherit; line-height:18px; margin:0px!important; padding:0px 3px 0px 10px!important; list-style-position:outside!important"> addingnewentry"ou=Group,108); list-style-type:decimal-leading-zero; color:inherit; line-height:18px; margin:0px!important; padding:0px 3px 0px 10px!important; list-style-position:outside!important"> addingnewentry"ou=Netgroup,108); list-style-type:decimal-leading-zero; color:inherit; line-height:18px; margin:0px!important; padding:0px 3px 0px 10px!important; list-style-position:outside!important"> addingnewentry"ou=Protocols,108); list-style-type:decimal-leading-zero; color:inherit; line-height:18px; margin:0px!important; padding:0px 3px 0px 10px!important; list-style-position:outside!important"> addingnewentry"ou=Aliases,108); list-style-type:decimal-leading-zero; color:inherit; line-height:18px; margin:0px!important; padding:0px 3px 0px 10px!important; list-style-position:outside!important"> addingnewentry"nisMapName=netgroup.byhost,dc=com">

>[root@cent-1migrationtools]#ldapsearch-x-D"cn=Manager,dc=com"-b"ou=Aliases,dc=com"-W
1. #extendedLDIF
2. #
3. #LDAPv3
4. #base<ouou=Aliases,dc=com>withscopesubtree
5. #filter:(objectclass=*)
6. #requesting:ALL
7. #
8. #Aliases,hadoop.com
9. dn:ou=Aliases,dc=com
10. ou:Aliases
11. objectClass:top
12. objectClass:organizationalUnit
13. #searchresult
14. search:2
15. result:0Success
16. #numResponses:2
17. #numEntries:1>

>[root@cent-1migrationtools]#yuminstallhttpdphpldapadmin-y>

>Alias/phpldapadmin/usr/share/phpldapadmin/htdocs
1. Alias/ldapadmin/usr/share/phpldapadmin/htdocs
2. Directory/usr/share/phpldapadmin/htdocs>
3. OrderDeny,Allow
4. Allowfromall
5. Directory>>

15 修改/etc/phpldapadmin/config.php配置用DN登录

>$servers->setValue('login','attr','dn');
1. //$servers->

>[root@cent-1migrationtools]#servicehttpdstatus
1. httpdisstopped
2. [root@cent-1migrationtools]#servicehttpdstart
3. Startinghttpd:httpd:Couldnotreliablydeterminetheserver'sfullyqualifieddomainname,using192.168.0.16forServerName
4. [OK]>

17 打开Web UI并登录LDAP

（编辑：李大同）

【声明】本站内容均来自网络，其相关言论仅代表作者个人观点，不代表本站立场。若无意侵犯到您的权利，请及时与联系站长删除相关内容!