LDAPopenldap安装和配置.docxVIP

openldap安装和配置 openldap需要安装以下rpm包： [root@nm openldap]# rpm -qa | grep ldapopenldap-2.2.13-6.4Eopenldap-devel-2.2.13-6.4Eopenldap-clients-2.2.13-6.4Eopenldap-servers-2.2.13-6.4E 如果需要用ldap做一些高级应用，还需要加装如下套件：?????auth_ldap* ： ldap for apache组件（用于web登陆ldap认证）?????nss_ldap*????ldap for nss and pam 组件 （用于linux登陆ldap认证）?????php_ldap*??（用于php 作为ldap client与ldap server连接的API接口） ? ? ??openldap配置 ????配置目录和配置文件 [root@nm openldap]# cd /etc/openldap/[root@nm openldap]# lscacerts/??ldap.conf??schema/??slapd.conf slapd.conf是设置ldap服务器ldap.conf是设置ldap客户机 ?slapd.conf [root@nm openldap]# cat slapd.confinclude?????????/etc/openldap/schema/core.schemainclude?????????/etc/openldap/schema/cosine.schemainclude?????????/etc/openldap/schema/inetorgperson.schemainclude?????????/etc/openldap/schema/nis.schema应尽量把/etc/openldap/schema目录下的schema文件都include进去database????????bdbsuffix??????????dc=otas,dc=cn???suffix就是BaseDNrootdn??????????cn=root,dc=otas,dc=cn?????rootdn: 管理 DN???????????????????????????????????????注意rootdn与baseDN的区别rootpw??????????admin123# rootpw????????????????secret?????????MD5认证# rootpw????????????????{crypt}ijFYNcSNctBYg# The database directory MUST exist prior to running slapd AND# should only be accessible by the slapd and slap tools.# Mode 700 recommended.directory???????/var/lib/ldap? ??/etc/hosts改本机域名,要对应到BaseDN [root@vmmac ~]# cat /etc/hosts# Do not remove the following line, or various programs# that require network functionality will fail.???????????????localhost.localdomain localhost17??????????????17??????????newvm ?19??????????????huitong-nko3iq0254 ???ldap.conf 要在ldap server运行ldap client tool (ldapadd 和 ldapsearch),必须先配置ldap.conf [root@vmmac ~]# cat /etc/openldap/ldap.conf## LDAP Defaults## See ldap.conf(5) for details# This file should be world readable but not world writable.#BASE???dc=example, dc=com#URI ldap:// ldap://:666#SIZELIMIT??????12#TIMELIMIT??????15#DEREF??????????never#HOST HOST 17 (或)和radius类