{"id":18666,"date":"2014-12-19T06:02:49","date_gmt":"2014-12-18T22:02:49","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/12\/19\/archlinux-openldap-server-%e8%a8%ad%e5%ae%9a\/"},"modified":"2014-12-19T06:02:49","modified_gmt":"2014-12-18T22:02:49","slug":"archlinux-openldap-server-%e8%a8%ad%e5%ae%9a","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/12\/19\/archlinux-openldap-server-%e8%a8%ad%e5%ae%9a\/","title":{"rendered":"ArchLinux – OpenLDAP Server \u8a2d\u5b9a"},"content":{"rendered":"

\u5efa\u7acb\u5b78\u751f\u7fa4\u7d44
# groupadd student<\/span>
\u5efa\u7acb\u8001\u5e2b\u7fa4\u7d44
# groupadd teacher<\/span><\/p>\n

\u5efa\u7acb\u5b78\u751f\u76ee\u9304
# mkdir -p \/home\/student\/s100<\/span>
\u5efa\u7acb\u8001\u5e2b\u76ee\u9304
# mkdir \/home\/teacher<\/span><\/p>\n

\u5efa\u7acb\u5b78\u751f\u5e33\u865f\u53ca\u5bc6\u78bc
# useradd -g student -d \/home\/student\/s100\/s100001 -m -s \/bin\/false -c “\u516d\u5fe001\u6797\u5c0f\u83ef” s100001<\/span>
# useradd -g student -d \/home\/student\/s100\/s100002 -m -s \/bin\/false -c “\u516d\u5fe002\u9673\u91d1\u82b1” s100002<\/span>
# passwd s100001<\/span>
Enter new UNIX password:<\/span>
Retype new UNIX password:<\/span>
passwd: password updated successfully<\/span>
# passwd s100002<\/span>
Enter new UNIX password:<\/span>
Retype new UNIX password:<\/span>
passwd: password updated successfully<\/span><\/p>\n

\u5efa\u7acb\u8001\u5e2b\u5e33\u865f\u53ca\u5bc6\u78bc
# useradd -g teacher -d \/home\/teacher\/t100001 -m -s \/bin\/false -c “\u674e\u963f\u571f” t100001<\/span>
# passwd t100001<\/span>
Enter new UNIX password:<\/span>
Retype new UNIX password:<\/span>
passwd: password updated successfully<\/span>
[@more@]
# mkdir \/root\/ldif<\/span>
# egrep ‘teacher|student’ \/etc\/group > \/root\/ldif\/group<\/span>
# cat \/root\/ldif\/group<\/span>
student:x:1000:<\/span>
teacher:x:1001:<\/span><\/p>\n

# egrep ‘t100|s100’ \/etc\/passwd > \/root\/ldif\/passwd<\/span>
# cat \/root\/ldif\/passwd<\/span>
s100001:x:1002:1000:\u516d\u5fe001\u6797\u5c0f\u83ef:\/home\/student\/s100\/s100001:\/bin\/false<\/span>
s100002:x:1003:1000:\u516d\u5fe002\u9673\u91d1\u82b1:\/home\/student\/s100\/s100002:\/bin\/false<\/span>
t100001:x:1004:1001:\u674e\u963f\u571f:\/home\/teacher\/t100001:\/bin\/false<\/span><\/p>\n

\u4f7f\u7528 migrationtools \u5de5\u5177
# cd \/usr\/share\/MigrationTools-47<\/span>
# .\/migrate_base.pl > \/root\/ldif\/base.ldif <\/span>
# .\/migrate_passwd.pl \/root\/ldif\/passwd > \/root\/ldif\/passwd.ldif <\/span>
# .\/migrate_group.pl \/root\/ldif\/group > \/root\/ldif\/group.ldif <\/span> <\/p>\n

# cat \/root\/ldif\/base.ldif<\/span>
dn: dc=ldap,dc=tces.ilc.edu.tw<\/span>
dc: ldap<\/span>
objectClass: top<\/span>
objectClass: domain<\/span>
objectClass: domainRelatedObject<\/span>
associatedDomain: tces.ilc.edu.tw<\/span><\/p>\n

dn: ou=Group,dc=ldap,dc=tces.ilc.edu.tw<\/span>
ou: Group<\/span>
objectClass: top<\/span>
objectClass: organizationalUnit<\/span>
objectClass: domainRelatedObject<\/span>
associatedDomain: tces.ilc.edu.tw<\/span><\/p>\n

dn: ou=People,dc=ldap,dc=tces.ilc.edu.tw<\/span>
ou: People<\/span>
objectClass: top<\/span>
objectClass: organizationalUnit<\/span>
objectClass: domainRelatedObject<\/span>
associatedDomain: tces.ilc.edu.tw<\/span><\/p>\n

\u6e05\u7a7a\u8cc7\u6599
# systemctl stop slapd<\/span>
# rm -rf<\/span> \/var\/lib\/openldap\/openldap-data\/*<\/span>
# rm -rf \/etc\/openldap\/slapd.d\/*<\/span>
# cp \/etc\/openldap\/DB_CONFIG.example \/var\/lib\/openldap\/openldap-data\/DB_CONFIG<\/span>
# chown ldap:ldap \/var\/lib\/openldap\/openldap-data\/DB_CONFIG<\/span>
# slaptest -f \/etc\/openldap\/slapd.conf -F \/etc\/openldap\/slapd.d<\/span>
# chown -R ldap.ldap \/etc\/openldap\/slapd.d<\/span>
# chown -R ldap.ldap \/var\/lib\/openldap\/openldap-data\/*<\/span>
# systemctl start slapd<\/span><\/p>\n

\u958b\u59cb\u532f\u5165
# systemctl stop slapd <\/span>
# \/usr\/bin\/slapadd -l \/root\/ldif\/base.ldif <\/span>
545aedd1 bdb_monitor_db_open: monitoring disabled; configure monitor database to enable
_#################### 100.00% eta\u00a0\u00a0 none elapsed\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 none fast!
Closing DB…<\/span>
# \/usr\/bin\/slapadd -l \/root\/ldif\/passwd.ldif<\/span>
# \/usr\/bin\/slapadd -l \/root\/ldif\/group.ldif<\/span><\/p>\n

\u66f4\u6539\u76ee\u9304\u64c1\u6709\u8005\u53ca\u555f\u52d5 OpenLDAP Server
# chown -R ldap.ldap \/etc\/openldap\/slapd.d<\/span>
# chown -R ldap.ldap \/var\/lib\/openldap\/openldap-data\/*<\/span>
# systemctl start slapd<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u5efa\u7acb\u5b78\u751f\u7fa4\u7d44# groupadd student\u5efa\u7acb\u8001\u5e2b\u7fa4\u7d44# groupadd teacher \u5efa\u7acb\u5b78\u751f\u76ee\u9304 … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008ArchLinux – OpenLDAP Server \u8a2d\u5b9a\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[167,115],"tags":[],"class_list":["post-18666","post","type-post","status-publish","format-standard","hentry","category-c-84386","category-c-78460"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["530342"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18666"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=18666"}],"version-history":[{"count":0,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18666\/revisions"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=18666"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=18666"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=18666"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}