{"id":18665,"date":"2014-12-18T06:31:34","date_gmt":"2014-12-17T22:31:34","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/12\/18\/archlinux-%e5%ae%89%e8%a3%9d-openldap-server\/"},"modified":"2021-03-18T17:24:14","modified_gmt":"2021-03-18T09:24:14","slug":"archlinux-%e5%ae%89%e8%a3%9d-openldap-server","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/12\/18\/archlinux-%e5%ae%89%e8%a3%9d-openldap-server\/","title":{"rendered":"ArchLinux – \u5b89\u88dd OpenLDAP Server"},"content":{"rendered":"

\u53c3\u8003\u7db2\u7ad9\uff1a
OpenLDAP – ArchWiki<\/a> <\/p>\n

\u641c\u5c0b OpenLDAP\u00a0\u5957\u4ef6
# pacman -Ss openldap<\/span>
core\/openldap 2.4.40-1<\/span>
\u00a0\u00a0\u00a0 Lightweight Directory Access Protocol (LDAP) client and server<\/span> <\/p>\n

\u5b89\u88dd OpenLDAP Server
# pacman -S openldap<\/span>[@more@]<\/p>\n

\u8cc7\u6599\u5eab\u5b58\u653e\u4f4d\u7f6e
\/var\/lib\/openldap\/openldap-data<\/span><\/p>\n

\u8a2d\u5b9a\u6a94\u4f4d\u7f6e
\/etc\/openldap\/slapd.conf<\/span><\/p>\n

\u5099\u4efd\u8a2d\u5b9a\u6a94
# cp \/etc\/openldap\/slapd.conf \/etc\/openldap\/slapd.conf.$(date +%F)<\/span>
# cp \/var\/lib\/openldap\/openldap-data\/DB_CONFIG.example \/var\/lib\/openldap\/openldap-data\/DB_CONFIG<\/span>
# chown ldap:ldap \/var\/lib\/openldap\/openldap-data\/DB_CONFIG<\/span><\/p>\n

\u8a2d\u5b9a\u7ba1\u7406\u5bc6\u78bc
# \/usr\/bin\/slappasswd<\/span>
New password:<\/span>
Re-enter new password:<\/span>
{SSHA}RExxR+kZpVgxxxdSYtxxsU<\/p>\n

<\/span>\u4fee\u6539\u8a2d\u5b9a\u6a94 <\/span><\/span>\/etc\/openldap\/slapd.conf<\/span>
#<\/span> sed -i ‘s\/dc=my-domain,dc=com\/dc=ldap,dc=tces.ilc.edu.tw\/’ \/etc\/openldap\/slapd.conf<\/span>
#<\/span> sed -i ‘s\/secret\/<\/span><\/span>{SSHA}RExxR+kZpVgxxxdSYtxxsU\/’ \/etc\/openldap\/slapd.conf<\/span><\/p>\n

<\/span>
\u4fee\u6539\u8a2d\u5b9a\u6a94 <\/span><\/span>\/etc\/openldap\/slapd.conf
<\/span><\/span># vim \/etc\/openldap\/slapd.conf<\/span>
\u5728 include\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/etc\/openldap\/schema\/core.schema<\/span> \u4e0b\u52a0\u5165
include\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/etc\/openldap\/schema\/cosine.schema<\/span>
include\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/etc\/openldap\/schema\/inetorgperson.schema<\/span>
include\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/etc\/openldap\/schema\/nis.schema<\/span><\/p>\n

<\/span><\/span>
<\/span>\u4e0b\u8f09 openldap-migrationtools
# wget http:\/\/www.padl.com\/download\/MigrationTools-47.tar.gz<\/span><\/p>\n

\u89e3\u58d3\u7e2e
# tar xvzf MigrationTools-47.tar.gz -C \/usr\/share<\/span><\/p>\n

\u4fee\u6539\u8a2d\u5b9a\u6a94
# sed -i ‘s\/$DEFAULT_MAIL_DOMAIN = “padl.com”;\/$DEFAULT_MAIL_DOMAIN = “tces.ilc.edu.tw”;\/’ \/usr\/share\/MigrationTools-47\/migrate_common.ph<\/span>
# sed -i ‘s\/$DEFAULT_BASE = “dc=padl,dc=com”;\/$DEFAULT_BASE = “dc=ldap,dc=tces.ilc.edu.tw”;\/’ \/usr\/share\/MigrationTools-47\/migrate_common.ph<\/span>
# sed -i ‘s\/$EXTENDED_SCHEMA = 0;\/$EXTENDED_SCHEMA = 1;\/’<\/span> \/usr\/share\/MigrationTools-47\/migrate_common.ph<\/span><\/p>\n

\u7522\u751f\u65b0\u7684\u8a2d\u5b9a\uff0c\u4e26\u4fee\u6539\u6b0a\u9650
# mv \/etc\/openldap\/slapd.d \/etc\/openldap\/slapd.d.orig<\/span>
# mkdir \/etc\/openldap\/slapd.d<\/span>
# chown -R ldap.ldap \/etc\/openldap\/slapd.d<\/span>
# chown -R ldap.ldap \/var\/lib\/openldap\/openldap-data\/*<\/span><\/p>\n

\u6e2c\u8a66\u8a2d\u5b9a\u6a94
# slaptest -f \/etc\/openldap\/slapd.conf -F \/etc\/openldap\/slapd.d<\/span>
545ad5f4 bdb_monitor_db_open: monitoring disabled; configure monitor database to enable
config file testing succeeded<\/span>
# chown -R ldap.ldap \/etc\/openldap\/slapd.d<\/span>
# chown -R ldap.ldap \/var\/lib\/openldap\/openldap-data\/*<\/span><\/p>\n

\u555f\u52d5 OpenLDAP \u670d\u52d9
# systemctl start slapd<\/span>
\u8a2d\u5b9a\u958b\u6a5f\u6642\u555f\u52d5 OpenLDAP \u670d\u52d9
# systemctl enable slapd<\/span>
Created symlink from \/etc\/systemd\/system\/multi-user.target.wants\/slapd.service to \/lib\/systemd\/system\/slapd.service.<\/span><\/p>\n

\u6aa2\u67e5\u662f\u5426\u6709\u6b63\u5e38\u555f\u52d5
# netstat -antup | grep :389<\/span>
tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 0.0.0.0:389\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0:*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN\u00a0\u00a0\u00a0\u00a0\u00a0 2516\/slapd<\/span>
tcp6\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 :::389\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 :::*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN\u00a0\u00a0\u00a0\u00a0\u00a0 2516\/slapd<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u53c3\u8003\u7db2\u7ad9\uff1a OpenLDAP – ArchWiki \u641c\u5c0b OpenLDAP\u00a0\u5957\u4ef6 # pacman … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008ArchLinux – \u5b89\u88dd OpenLDAP Server\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[167,115],"tags":[],"class_list":["post-18665","post","type-post","status-publish","format-standard","hentry","category-c-84386","category-c-78460"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["530073"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18665"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=18665"}],"version-history":[{"count":1,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18665\/revisions"}],"predecessor-version":[{"id":20282,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18665\/revisions\/20282"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=18665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=18665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=18665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}