Table des matières
OpenLDAP
Installacion
Coma de costuma, una gabia/jail es creada per aculhir lo daemon slapd.
sudo iocage create -r RELEASE-11.2 -p pkgs.json -n openldap ip4_addr="bce0|192.168.0.xx" boot=on allow_raw_sockets=1
Sià lo paquetatge es demandat dins lo fichièr pkgs.json, sià es installat al dintre de la jail.
#pkg install openldap-server #sysrc slapd_enable="YES"
Configuracion
Los camins cap als esquemas son modificats, cada còp qu'es necessari un esquema deu èsser ajustat dins la tièra. Los moduls per manejar la basa de donadas son activats (decomentats). Lo
dn es entresenhat. La basa de donadas es mdb puèi lo mot de Santa Clara es chifrat amb slappasswd.
OpenLDAP sobre FreeBSD10.0
/usr/local/etc/openldap/slapd.conf
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /usr/local/etc/openldap/schema/core.schema
include /usr/local/etc/openldap/schema/cosine.schema
include /usr/local/etc/openldap/schema/corba.schema
include /usr/local/etc/openldap/schema/inetorgperson.schema
include /usr/local/etc/openldap/schema/java.schema
include /usr/local/etc/openldap/schema/misc.schema
include /usr/local/etc/openldap/schema/nis.schema
include /usr/local/etc/openldap/schema/openldap.schema
...
pidfile /var/run/openldap/slapd.pid
argsfile /var/run/openldap/slapd.args
# Load dynamic backend modules:
modulepath /usr/local/libexec/openldap
moduleload back_mdb
moduleload back_ldap
...
#######################################################################
# MDB database definitions
#######################################################################
#
database mdb
maxsize 1073741824
suffix "dc=osca-oc,dc=org"
rootdn "cn=Manager,dc=osca-oc,dc=org"
#
# Cleartext passwords, especially for the rootdn, should
# be avoid. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
#
#rootpw secret
rootpw {SSHA}m6Ya81FfW4ewenytR9ak5ANszXcLVzRl
#
directory /var/db/openldap-data
# Indices to maintain
index objectClass eq
