{"id":19406,"date":"2017-02-03T06:13:29","date_gmt":"2017-02-02T22:13:29","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2017\/02\/03\/%e8%a9%a6%e7%94%a8-banana-pi-m3-ubuntu-minimal-16-04-%e4%b8%8a%e5%ae%89%e8%a3%9d-openldap-server\/"},"modified":"2021-03-18T17:24:55","modified_gmt":"2021-03-18T09:24:55","slug":"%e8%a9%a6%e7%94%a8-banana-pi-m3-ubuntu-minimal-16-04-%e4%b8%8a%e5%ae%89%e8%a3%9d-openldap-server","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2017\/02\/03\/%e8%a9%a6%e7%94%a8-banana-pi-m3-ubuntu-minimal-16-04-%e4%b8%8a%e5%ae%89%e8%a3%9d-openldap-server\/","title":{"rendered":"\u8a66\u7528 Banana Pi M3 – Ubuntu minimal 16.04 \u4e0a\u5b89\u88dd OpenLDAP Server"},"content":{"rendered":"

\u53c3\u8003\u7db2\u7ad9\uff1a
Ubuntu Linux \u5b89\u88dd LDAP Server – G. T. Wang<\/a>
Ubuntu \u8a2d\u5b9a LDAP + PAM + NFS \u5be6\u73fe\u591a\u53f0\u96fb\u8166\u55ae\u4e00\u5e33\u865f\u9a57\u8b49 | Mowd Blog<\/a>
\u4f60\u7684\u7a0b\u5f0f\u6211\u7684Code: Ubuntu 15.04 – LDAP \u67b6\u8a2d<\/a>
\u4f7f\u7528Linux\u5efa\u7f6e\u4f01\u696d\u865b\u64ec\u79c1\u6709\u7db2\u8defSSL VPN\uff08\u4e0b\uff09 – \u6280\u8853\u5c08\u6b04 – \u7db2\u7ba1\u4ebaNetAdmin<\/a><\/p>\n

LDAP Server IP\uff1a192.168.1.20<\/span>
1. \u66f4\u65b0\u5957\u4ef6\u5eab
# apt-get update<\/span><\/p>\n

2. \u5b89\u88dd OpenLDAP Server
# apt-get install slapd ldap-utils<\/span>
\u8a2d\u5b9a LDAP \u7ba1\u7406\u5bc6\u78bc
\"\"<\/a>
\u5bc6\u78bc\u78ba\u8a8d
\"\"<\/a>
[@more@]3. \u9032\u884c\u8a73\u7d30\u7684\u8a2d\u5b9a
# dpkg-reconfigure slapd<\/span>
Omit OpenLDAP server configuration?<\/span> No<\/span>
\"\"<\/a>

DNS domain name:<\/span>
\"\"<\/a>

Organization name?<\/span>
\"\"<\/a><\/p>\n

Administrator password:<\/span> Admin Password<\/span>
\"\"<\/a><\/p>\n

Confirm password:<\/span> Admin Password<\/span>
\"\"<\/a><\/p>\n

Database backend to use:<\/span> MDB<\/span>
\"\"<\/a><\/p>\n

Do you want the database to be removed when slapd is purged?<\/span> No<\/span>
\"\"<\/a><\/p>\n

Move old database?<\/span> Yes<\/span>
\"\"<\/a><\/p>\n

Allow LDAPv2 protocol?<\/span> No<\/span>
\"\"<\/a><\/p>\n

4. \u4fee\u6539 \/etc\/ldap\/ldap.conf<\/span> \u8a2d\u5b9a\u6a94
# vim \/etc\/ldap\/ldap.conf<\/span>
BASE dc=bpim3,dc=test,dc=org<\/span>
URI ldap:\/\/192.168.1.20\/<\/span><\/p>\n

5. \u5efa\u7acb\u5169\u500b\u7fa4\u7d44\uff1aPeople \u8207 Group
# cat \/root\/ou.ldif<\/span>
dn: ou=People,dc=bpim3,dc=test,dc=org<\/span>
ou: People<\/span>
objectClass: organizationalUnit<\/span><\/p>\n

dn: ou=Group,dc=bpim3,dc=test,dc=org<\/span>
ou: Group<\/span>
objectClass: organizationalUnit<\/span><\/p>\n

6. \u5c07\u7fa4\u7d44\u8cc7\u6599\u52a0\u5165 LDAP \u4e4b\u4e2d
# systemctl stop slapd<\/span>
# \/usr\/sbin\/slapadd -c -v -l \/root\/ou.ldif<\/span>
# systemctl start slapd<\/span><\/p>\n

7. \u67e5\u8a62\u525b\u5efa\u7acb\u7684\u7fa4\u7d44
# \/usr\/bin\/ldapsearch -x ou=people<\/span>
# extended LDIF<\/span>
#<\/span>
# LDAPv3<\/span>
# base <dc=bpim3,dc=test,dc=org> (default) with scope subtree<\/span>
# filter: ou=people<\/span>
# requesting: ALL<\/span>
#<\/span><\/p>\n

# People, example.com<\/span>
dn: ou=People,dc=bpim3,dc=test,dc=org<\/span>
ou: People<\/span>
objectClass: organizationalUnit<\/span><\/p>\n

# search result<\/span>
search: 2<\/span>
result: 0 Success<\/span><\/p>\n

# numResponses: 2<\/span>
# numEntries: 1<\/span><\/p>\n

8. \u5efa\u7acb\u4f7f\u7528\u8005\u8cc7\u6599 user.ldif
# cat \/root\/user.ldif<\/span>
dn: cn=test001,ou=group,dc=bpim3,dc=test,dc=org<\/span>
cn: test001<\/span>
gidNumber: 1002<\/span>
objectClass: top<\/span>
objectClass: posixGroup<\/span><\/p>\n

dn: uid=test001,ou=people,dc=bpim3,dc=test,dc=org<\/span>
uid: test001<\/span>
uidNumber: 1002<\/span>
gidNumber: 1002<\/span>
cn: test001<\/span>
sn: LDAP<\/span>
objectClass: top<\/span>
objectClass: person<\/span>
objectClass: posixAccount<\/span>
objectClass: shadowAccount<\/span>
loginShell: \/bin\/false<\/span>
homeDirectory: \/home\/test001<\/span><\/p>\n

dn: cn=test002,ou=group,dc=bpim3,dc=test,dc=org<\/span>
cn: test002<\/span>
gidNumber: 1003<\/span>
objectClass: top<\/span>
objectClass: posixGroup<\/span><\/p>\n

dn: uid=test002,ou=people,dc=bpim3,dc=test,dc=org<\/span>
uid: test002<\/span>
uidNumber: 1003<\/span>
gidNumber: 1003<\/span>
cn: test002<\/span>
sn: LDAP<\/span>
objectClass: top<\/span>
objectClass: person<\/span>
objectClass: posixAccount<\/span>
objectClass: shadowAccount<\/span>
loginShell: \/bin\/false<\/span>
homeDirectory: \/home\/test002<\/span><\/p>\n

9. \u532f\u5165\u4f7f\u7528\u8005\u8cc7\u6599
# \/usr\/bin\/ldapadd -c -x -D cn=admin,dc=bpim3,dc=test,dc=org -W -f user.ldif<\/span>
Enter LDAP Password: <\/span>Admin Password<\/span><\/span>
adding new entry \u201ccn=test001,ou=group,dc=bpim3,dc=test,dc=org”<\/span>
adding new entry \u201cuid=test001,ou=people,dc=bpim3,dc=test,dc=org”<\/span><\/p>\n

10. \u8a2d\u5b9a\u4f7f\u7528\u8005\u5bc6\u78bc
# \/usr\/bin\/ldappasswd -x -D cn=admin,dc=bpim3,dc=test,dc=org -W -S uid=test001,ou=people,dc=bpim3,dc=test,dc=org<\/span>
New password: New User Password<\/span><\/span>
Re-enter new password: New User Password<\/span><\/span>
Enter LDAP Password: Admin Password<\/span><\/span>
Result: Success (0)<\/span>
# \/usr\/bin\/ldappasswd -x -D cn=admin,dc=bpim3,dc=test,dc=org -W -S uid=test002,ou=people,dc=bpim3,dc=test,dc=org<\/span><\/p>\n

11. \u67e5\u8a62\u65b0\u589e\u7684\u4f7f\u7528\u8005
# \/usr\/bin\/ldapsearch -x uid=test001<\/span>
# extended LDIF<\/span>
#<\/span>
# LDAPv3<\/span>
# base <dc=bpim3,dc=test,dc=org> (default) with scope subtree<\/span>
# filter: uid=test001<\/span>
# requesting: ALL<\/span>
#<\/span><\/p>\n

# test001, People, example.com<\/span>
dn: uid=test001,ou=People,dc=bpim3,dc=test,dc=org<\/span>
uid: test001<\/span>
uidNumber: 1002<\/span>
gidNumber: 1002<\/span>
cn: test001<\/span>
sn: LDAP<\/span>
objectClass: top<\/span>
objectClass: person<\/span>
objectClass: posixAccount<\/span>
objectClass: shadowAccount<\/span>
loginShell: \/bin\/false<\/span>
homeDirectory: \/home\/test001<\/span><\/p>\n

# search result<\/span>
search: 2<\/span>
result: 0 Success<\/span><\/p>\n

# numResponses: 2<\/span>
# numEntries: 1<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u53c3\u8003\u7db2\u7ad9\uff1aUbuntu Linux \u5b89\u88dd LDAP Server – G. T. WangUbun … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008\u8a66\u7528 Banana Pi M3 – Ubuntu minimal 16.04 \u4e0a\u5b89\u88dd OpenLDAP Server\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[162,115,119],"tags":[],"class_list":["post-19406","post","type-post","status-publish","format-standard","hentry","category-c-83744","category-c-78460","category-c-78464"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["681785"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19406"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=19406"}],"version-history":[{"count":1,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19406\/revisions"}],"predecessor-version":[{"id":20943,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19406\/revisions\/20943"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=19406"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=19406"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=19406"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}