OpenLDAP

Installacion

Coma de costuma, una gabia/jail es creada per aculhir lo daemon slapd.

sudo iocage create -r RELEASE-11.2 -p pkgs.json -n openldap ip4_addr="bce0|192.168.0.xx" boot=on allow_raw_sockets=1

Sià lo paquetatge es demandat dins lo fichièr pkgs.json, sià es installat al dintre de la jail.

#pkg install openldap-server
#sysrc slapd_enable="YES"

Configuracion

Los camins cap als esquemas son modificats, cada còp qu'es necessari un esquema deu èsser ajustat dins la tièra. Los moduls per manejar la basa de donadas son activats (decomentats). Lo dn es entresenhat. La basa de donadas es mdb puèi lo mot de Santa Clara es chifrat amb slappasswd.

OpenLDAP sobre FreeBSD10.0

Getting started with OpenLDAP on FreeBSD10.0

/usr/local/etc/openldap/slapd.conf

#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /usr/local/etc/openldap/schema/core.schema
include         /usr/local/etc/openldap/schema/cosine.schema
include         /usr/local/etc/openldap/schema/corba.schema
include         /usr/local/etc/openldap/schema/inetorgperson.schema
include         /usr/local/etc/openldap/schema/java.schema
include         /usr/local/etc/openldap/schema/misc.schema
include         /usr/local/etc/openldap/schema/nis.schema
include         /usr/local/etc/openldap/schema/openldap.schema

...

pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args

# Load dynamic backend modules:
modulepath      /usr/local/libexec/openldap
moduleload      back_mdb
moduleload      back_ldap

...

#######################################################################
# MDB database definitions
#######################################################################
#
database        mdb
maxsize         1073741824
suffix          "dc=osca-oc,dc=org"
rootdn          "cn=Manager,dc=osca-oc,dc=org"
#
# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
#
#rootpw          secret
rootpw          {SSHA}m6Ya81FfW4ewenytR9ak5ANszXcLVzRl   
#
directory       /var/db/openldap-data
# Indices to maintain
index   objectClass     eq