(r1) LDAP-Installation-Configuration < Main

Tags: , view all tags
---++ Instalacão e configuracão inicial de um servidor LDAP
   *   Downloads através do yum: <br /> 
ldap-admin-tool (lat)<br />  ldap scripts<br /> ldap-servers<br /> ldap-clients<br />

   *   Instalar o pacote do LDAP servidor:

<pre>yum install openldap-servers </pre>
   * Para adicionar um repositório 
<pre>vim /etc/yum.repos.d/CentOs-Base.repo </pre> Altere de enabled=0 para enabled=1. Isto habilita o repositório<br />

<pre>#baseurl=http://mirror.centos.org/centos/$releasever/centosplus/$basearch/
gpgcheck=1
enabled=1
gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-5
</pre>
   * Editar as configuracões do ldap:

<pre>vim /etc/openldap/ldap.conf </pre><pre>URI ldap://127.0.0.1/
BASE dc=grid,dc=unesp,dc=br
TLS_CACERTDIR /etc/openldap/cacerts

 
   suffix grid.unesp.br
   root dn=
   base dc= </pre>

yum install screen

<pre>ldappasswd</pre>

<pre>vim /etc/sysconfig/ldap</pre>
   * Instalacão do client

<pre>yum install openldap-clients</pre>
   * Para localizar a tabela:
<pre>ldapsearch -x D "cn=Manager,dc=grid,dc=unesp,dc=br" -w h 200.136.803.148</pre> O resultado deve ser semelhante a: <pre># extended LDIF
#
# LDAPv3
# base &lt;&gt; with scope subtree
# filter: (objectclass=*)
# requesting: D cn=Manager,dc=grid,dc=unesp,dc=br 200.136.803.148 
#

# search result
search: 2
result: 32 No such object
matchedDN: dc=unesp,dc=br

# numResponses: 1
[root@localhost ~]# 
</pre>
   * Editar:

<pre>vim /usr/share/openldap/migration/migrate_common.ph </pre> # Default DNS domain $DEFAULT_MAIL_DOMAIN = "grid.unesp.br";

# Default base $DEFAULT_BASE = "dc=grid,dc=unesp,dc=br";

ldapmodify -x- D "cn=Manager,dc=grid,dc=unesp,dc=br" <br />

<br />
   * Para iniciar o ldap
<pre>ldapinit</pre>

<pre>ldap setpasswd </pre>
   * Edite o arquivo:
<pre>vim /etc/nsswitch</pre> Siga o exemplo abaixo <pre># Example:
#passwd:    db files nisplus nis
#shadow:    db files nisplus nis
#group:     db files nisplus nis

passwd:     files
shadow:     files
group:      files
</pre>
   * Para verificar usuarios do LDAP na lista de passwd do /etc
<pre>getend </pre>

-- Main.AllanSzu - 26 Jan 2009 <br />
Topic revision: r1 - 2009-01-26 - AllanSzu
antalya escort bursa escort eskisehir escort istanbul escort izmir escort