====== OpenLDAP ======

===== Installacion =====
Coma de costuma, una gabia///jail// es creada per aculhir lo daemon ''slapd''.\\
<code bash>
sudo iocage create -r RELEASE-11.2 -p pkgs.json -n openldap ip4_addr="bce0|192.168.0.xx" boot=on allow_raw_sockets=1
</code>
Sià lo paquetatge es demandat dins lo fichièr ''pkgs.json'', sià es installat al dintre de la //jail//.

<code bash>
#pkg install openldap-server
#sysrc slapd_enable="YES"
</code>
===== Configuracion =====
<note>
Los camins cap als esquemas son modificats, cada còp qu'es necessari un esquema deu èsser ajustat dins la tièra. Los moduls per manejar la basa de donadas son activats (decomentats). Lo ''dn'' es entresenhat. La basa de donadas es ''mdb'' puèi lo mot de Santa Clara es chifrat amb ''slappasswd''.
</note>
== OpenLDAP sobre FreeBSD10.0 ==
[[https://fosskb.in/2014/12/15/openldap-on-freebsd10/|Getting started with OpenLDAP on FreeBSD10.0]]
== /usr/local/etc/openldap/slapd.conf ==
<file>
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /usr/local/etc/openldap/schema/core.schema
include         /usr/local/etc/openldap/schema/cosine.schema
include         /usr/local/etc/openldap/schema/corba.schema
include         /usr/local/etc/openldap/schema/inetorgperson.schema
include         /usr/local/etc/openldap/schema/java.schema
include         /usr/local/etc/openldap/schema/misc.schema
include         /usr/local/etc/openldap/schema/nis.schema
include         /usr/local/etc/openldap/schema/openldap.schema

...

pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args

# Load dynamic backend modules:
modulepath      /usr/local/libexec/openldap
moduleload      back_mdb
moduleload      back_ldap

...

#######################################################################
# MDB database definitions
#######################################################################
#
database        mdb
maxsize         1073741824
suffix          "dc=osca-oc,dc=org"
rootdn          "cn=Manager,dc=osca-oc,dc=org"
#
# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
#
#rootpw          secret
rootpw          {SSHA}m6Ya81FfW4ewenytR9ak5ANszXcLVzRl   
#
directory       /var/db/openldap-data
# Indices to maintain
index   objectClass     eq
</file>