openldap-2.4.44的安装方法

本篇内容介绍了"openldap-2.4.44的安装方法"的有关知识，在实际案例的操作过程中，不少人都会遇到这样的困境，接下来就让小编带领大家学习一下如何处理这些情况吧！希望大家仔细阅读，能够学有所成！

一、安装base-repo

## 根据自己的OS版本安装对应的base reporpm -Uvh http://mirror.centos.org/centos/7/os/x86_64/Packages/centos-release-7-6.1810.2.el7.centos.x86_64.rpmls -l /etc/yum.repo/total 44-rw-r--r--. 1 root root 1664 Nov 23  2018 CentOS-Base.repo-rw-r--r--. 1 root root 1309 Nov 23  2018 CentOS-CR.repo-rw-r--r--. 1 root root  649 Nov 23  2018 CentOS-Debuginfo.repo-rw-r--r--. 1 root root  314 Nov 23  2018 CentOS-fasttrack.repo-rw-r--r--. 1 root root  630 Nov 23  2018 CentOS-Media.repo-rw-r--r--. 1 root root 1331 Nov 23  2018 CentOS-Sources.repo-rw-r--r--. 1 root root 5701 Nov 23  2018 CentOS-Vault.repo-rw-r--r--. 1 root root  951 Oct  2  2017 epel.repo-rw-r--r--. 1 root root 1050 Oct  2  2017 epel-testing.repo-rw-r--r--. 1 root root 2003 Jul  8 07:44 READMEyum install epel-release*

二、安装openldap-server/devel/clients

yum install -y openldap-servers openldap-clients openldap-develrpm -qa|grep openldap*openldap-servers-sql-2.4.44-21.el7_6.x86_64openldap-2.4.44-21.el7_6.x86_64openldap-clients-2.4.44-21.el7_6.x86_64openldap-devel-2.4.44-21.el7_6.x86_64openldap-servers-2.4.44-21.el7_6.x86_64

三、配置openldap-server

配置slappasswd

slappasswd -s 123456{SSHA}NRWg5Ig47XVGHZq0eX/ayx8NSCSbiIw8

修改basedn

vi /etc/openldap/slapd.d/cn\=config/olcDatabase\=\{2\}hdb.ldif...olcSuffix: dc=harry,dc=comolcRootDN: cn=Manager,dc=harry,dc=comolcRootPW: {SSHA}NRWg5Ig47XVGHZq0eX/ayx8NSCSbiIw8...vi /etc/openldap/slapd.d/cn\=config/olcDatabase\=\{1\}monitor.ldif...olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=extern al,cn=auth" read by dn.base="cn=Manager,dc=harry,dc=com" read by * none...

配置SSL

cd /etc/openldap/certs/rm -rf /etc/openldap/certs/*openssl genrsa -out cert.key 1024openssl req -new -key cert.key -out cert.csropenssl x509 -req -days 3650 -in cert.csr -signkey cert.key -out cert.crtvi SLAPD_URLS="ldapi:/// ldap:///"...olcTLSCACertificatePath: /etc/openldap/certsolcTLSCertificateFile: /etc/openldap/certs/cert.crtolcTLSCertificateKeyFile: /etc/openldap/certs/cert.key...cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIGchown ldap:ldap -R /etc/openldap### vi /etc/sysconfig/slapd...SLAPD_URLS="ldapi:/// ldap:/// ldaps:///"...

启用memberof

vi add_module_group.ldif...dn: cn=module,cn=configcn: moduleobjectClass: olcModuleListobjectClass: topolcModuleLoad: memberof.laolcModulePath: /usr/lib64/openldap...vi add_module_group-2.ldif...dn: olcOverlay={0}memberof,olcDatabase={2}hdb,cn=configobjectClass: olcConfigobjectClass: olcMemberOfobjectClass: olcOverlayConfigobjectClass: topolcOverlay: memberofolcMemberOfDangling: ignoreolcMemberOfRefInt: TRUEolcMemberOfGroupOC: groupOfUniqueNamesolcMemberOfMemberAD: uniqueMemberolcMemberOfMemberOfAD: memberOf...vi add-refin1.ldif...dn: cn=module{0},cn=configadd: olcmoduleloadolcmoduleload: refint...vi add-refin2.ldif...dn: olcOverlay=refint,olcDatabase={2}hdb,cn=configobjectClass: olcConfigobjectClass: olcOverlayConfigobjectClass: olcRefintConfigobjectClass: topolcOverlay: refintolcRefintAttribute: memberof uniqueMember  manager owner...

检测配置并启动

slaptest -uservice slapd restartnetstat -tunpl | grep 389netstat -tunpl | grep 636

四、安装phpldapadmin

yum install phpldapadmin*

配置phpldapadmin

vi /etc/httpd/conf.d/phpldapadmin.conf...            # Apache 2.4    # Require local    Require all granted  ...vi /etc/phpldapadmin/config.php...#$servers->setValue('login','attr','uid');$servers->setValue('server','host','127.0.0.1');$servers->setValue('server','port',389);$servers->setValue('server','base',array('dc=harry,dc=com'));$servers->setValue('login','auth_type','session');$servers->setValue('login','bind_id','cn=Manager,dc=harry,dc=com');$servers->setValue('login','bind_pass','123456');...

添加base.ldif

###This base cannot be created with PLA.vi base.ldifdn: dc=harry,dc=como: ldapobjectclass: dcObjectobjectclass: organizationldapadd -f base.ldif -x -D 'cn=Manager,dc=harry,dc=com' -W

添加memberof

"openldap-2.4.44的安装方法"的内容就介绍到这里了，感谢大家的阅读。如果想了解更多行业相关的知识可以关注网站，小编将为大家输出更多高质量的实用文章！