Différences
Ci-dessous, les différences entre deux révisions de la page.
Les deux révisions précédentes Révision précédente Prochaine révision | Révision précédente | ||
user:domenge:openldap [2018/11/28 08:05] domenge |
user:domenge:openldap [2018/11/29 09:22] (Version actuelle) domenge [Configuracion] |
||
---|---|---|---|
Ligne 1: | Ligne 1: | ||
====== OpenLDAP ====== | ====== OpenLDAP ====== | ||
+ | |||
+ | ===== Installacion ===== | ||
Coma de costuma, una gabia///jail// es creada per aculhir lo daemon ''slapd''.\\ | Coma de costuma, una gabia///jail// es creada per aculhir lo daemon ''slapd''.\\ | ||
- | Lo paquetatge ''openldap_server'' es installat per aquò.\\ | ||
<code bash> | <code bash> | ||
+ | sudo iocage create -r RELEASE-11.2 -p pkgs.json -n openldap ip4_addr="bce0|192.168.0.xx" boot=on allow_raw_sockets=1 | ||
+ | </code> | ||
+ | Sià lo paquetatge es demandat dins lo fichièr ''pkgs.json'', sià es installat al dintre de la //jail//. | ||
+ | |||
+ | <code bash> | ||
+ | #pkg install openldap-server | ||
#sysrc slapd_enable="YES" | #sysrc slapd_enable="YES" | ||
</code> | </code> | ||
+ | ===== Configuracion ===== | ||
+ | <note> | ||
+ | Los camins cap als esquemas son modificats, cada còp qu'es necessari un esquema deu èsser ajustat dins la tièra. Los moduls per manejar la basa de donadas son activats (decomentats). Lo ''dn'' es entresenhat. La basa de donadas es ''mdb'' puèi lo mot de Santa Clara es chifrat amb ''slappasswd''. | ||
+ | </note> | ||
+ | == OpenLDAP sobre FreeBSD10.0 == | ||
+ | [[https://fosskb.in/2014/12/15/openldap-on-freebsd10/|Getting started with OpenLDAP on FreeBSD10.0]] | ||
+ | == /usr/local/etc/openldap/slapd.conf == | ||
+ | <file> | ||
+ | # | ||
+ | # See slapd.conf(5) for details on configuration options. | ||
+ | # This file should NOT be world readable. | ||
+ | # | ||
+ | include /usr/local/etc/openldap/schema/core.schema | ||
+ | include /usr/local/etc/openldap/schema/cosine.schema | ||
+ | include /usr/local/etc/openldap/schema/corba.schema | ||
+ | include /usr/local/etc/openldap/schema/inetorgperson.schema | ||
+ | include /usr/local/etc/openldap/schema/java.schema | ||
+ | include /usr/local/etc/openldap/schema/misc.schema | ||
+ | include /usr/local/etc/openldap/schema/nis.schema | ||
+ | include /usr/local/etc/openldap/schema/openldap.schema | ||
+ | |||
+ | ... | ||
+ | |||
+ | pidfile /var/run/openldap/slapd.pid | ||
+ | argsfile /var/run/openldap/slapd.args | ||
+ | |||
+ | # Load dynamic backend modules: | ||
+ | modulepath /usr/local/libexec/openldap | ||
+ | moduleload back_mdb | ||
+ | moduleload back_ldap | ||
+ | |||
+ | ... | ||
+ | ####################################################################### | ||
+ | # MDB database definitions | ||
+ | ####################################################################### | ||
+ | # | ||
+ | database mdb | ||
+ | maxsize 1073741824 | ||
+ | suffix "dc=osca-oc,dc=org" | ||
+ | rootdn "cn=Manager,dc=osca-oc,dc=org" | ||
+ | # | ||
+ | # Cleartext passwords, especially for the rootdn, should | ||
+ | # be avoid. See slappasswd(8) and slapd.conf(5) for details. | ||
+ | # Use of strong authentication encouraged. | ||
+ | # | ||
+ | #rootpw secret | ||
+ | rootpw {SSHA}m6Ya81FfW4ewenytR9ak5ANszXcLVzRl | ||
+ | # | ||
+ | directory /var/db/openldap-data | ||
+ | # Indices to maintain | ||
+ | index objectClass eq | ||
+ | </file> |