Erecting OPENLDAP Servers

OpenLDAP is an open source software that can be used for free, and its homepage address is: http://www.openldap.org/. Installing OpenLDAP on Rhel 6 also requires libtool-ltdl-2.2.6-15.5.e16.i686.rpm file support.

Installation:

# RPM-IVH libtool-ltdl-2.2.6-15.5.e16.i686.rpm

Warning:libtool-ltdl-2.2.6-15.5.e16.i686.rpm:header V3 DSA Signature:

Nokey,key ID 37017186

Preparing ... ########################[100%]

1:libtool-ltdl ########################[100%]

#rpm-IVH openldap-servers-2.4.23-26.e16.i686.rpm

Warning:openldap-servers-2.4.23-26.e16.i686.rpm:header V3 rsa/sha256

Signature, Key ID Fd431d51:nokey

Preparing ... ########################[100%]

1:openldap-servers ########################[100%]

#

After successful installation, several important files about the OPENLDAP Server Software are distributed as follows:

/etc/openldap/db_config.example: Example configuration of the database

/etc/openldap/schema: This directory has predefined many patterns

/ETC/OPENLDAP/SLAPD.CONF:OPENLDAP's master configuration file

/etc/rc.d/init.d/ldap:openldap startup script

/USR/SBIN/SLAPD:OPENLDAP Server process files

/USR/SHARE/DOC/OPENLDAP-SERVERS-2.4.23:OPENLDAP's documentation

While the OPENLDAP server is running, you also need support for the Berkeley DB database, you can use the following command to see if the package for that database is already installed on your system:

#rpm-qa | grep DB4

Db4-devel-4.3.29-9.fc6

Db4-4.3.29-9.fc6

Db4-utils-4.3.29-9.fc6

#

If the three RPM packages listed above indicate that the Berkeley DB database is installed

Initialize configuration

#/etc/rc.d/init.d/slapd start

Checking SLAPD configuration file: bdb_db_open:warning-no db_config file found in

Directory/var/lib/ldap: (2)

Expect poor performance for suffix dc=my-domain,dc=com.

Config file testing succeeded

Determine

Start SLAPD: [OK]

#ps-eaf | grep LDAP

LDAP 5316 1 0 17:30? 00:00:00/usr/sbin/slapd-h ldap:///-U LDAP

#

As you can see, the OPENLDAP server has only one process running by the LDAP user, and there is a warning that the/etc/openldap/db_config.example file can be copied to the/var/lib/ldap directory. and rename it to Db_congig, you can dismiss the warning.

OpenLDAP The default listener TCP389 port, you can enter the following command to see if the port is already in the listening state:

#netstat-ANP | grep:389

TCP 0 0 0.0.0.0:389 0.0.0.0 "* LISTEN 5316/SLAPD

TCP 0 0::: 389:::* LISTEN 5316/SLAPD

#

This shows that the TCP389 port is already in the listening state. In order for remote clients to use the OPENLDAP server, the host firewall is required to open these ports:

#iptables-I input-p TCP--dport 389-j ACCEPT

Or you can empty all the rules of the firewall:

#iptables-F

After the completion of the above, the OPENLDAP server has been able to run properly.

Erecting OPENLDAP Servers