OpenLDAP

Installacion

Coma de costuma, una gabia/jail es creada per aculhir lo daemon slapd.

sudo iocage create -r RELEASE-11.2 -p pkgs.json -n openldap ip4_addr="bce0|192.168.0.xx" boot=on allow_raw_sockets=1

Sià lo paquetatge es demandat dins lo fichièr pkgs.json, sià es installat al dintre de la jail.

#pkg install openldap-server
#sysrc slapd_enable="YES"

/usr/local/etc/openldap/slapd.conf

Los camins cap als esquemas son modificats, cada còp qu'es necessari un esquema deu èsser ajustat dins la tièra.

#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /usr/local/etc/openldap/schema/core.schema
include         /usr/local/etc/openldap/schema/cosine.schema
include         /usr/local/etc/openldap/schema/corba.schema
include         /usr/local/etc/openldap/schema/inetorgperson.schema
include         /usr/local/etc/openldap/schema/java.schema
include         /usr/local/etc/openldap/schema/misc.schema
include         /usr/local/etc/openldap/schema/nis.schema
include         /usr/local/etc/openldap/schema/openldap.schema

...

pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args

# Load dynamic backend modules:
modulepath      /usr/local/libexec/openldap
moduleload      back_mdb
moduleload      back_ldap

...

#######################################################################
# MDB database definitions
#######################################################################
#
database        mdb
maxsize         1073741824
suffix          "dc=osca-oc,dc=org"
rootdn          "cn=Manager,dc=osca-oc,dc=org"
#
# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
#
#rootpw          secret
rootpw          {SSHA}m6Ya81FfW4ewenytR9ak5ANszXcLVzRl   
#
directory       /var/db/openldap-data
# Indices to maintain
index   objectClass     eq