OpenLDAP compilation and installation and configuration, openldap compilation Configuration
Original article published in cu:
Reference:I. Environment
Server: CentOS-7-x86_64-1511 based
Server IP: 172.18.12.2032. The software obtains OpenLDAP
OpenLDAP Official Website: http://www.openldap.org/software/download/
OpenLDAP 2.4.44: ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-2.4.44.tgzBDB
Berkeley-db-5.1.29(OpenLDAPThe current version is not compatible with version 6.x, and READEME
epel源Modify the configuration file to increaseVi/etc/httpd/conf/httpd.confServerName www.ulink.comAlias/phpldapadmin/usr/share/phpldapadmin/htdocsAlias/ldapadmin/usr/share/phpldapadmin/htdocsOrder Deny,allowDeny from allAllow from 127.0.0.1 192.168.10.0/24Allow from:: 1Modifying the Phpldapadmin configuration file1234[[email protected] ~]# vi/etc/phpldapadmin/config.php# line 397:uncomment, line 398:make it comment$servers->setvalue (' login ', ' attr
OpenLDAP default account is cn=manager,dc=361way,dc=com such an account, which is written in the configuration file/etc/openldap/ slapd.conf file, but such an account is like the root of Linux, although it works, but the permissions are too large. For security reasons, we need to set up a read-only account or a writable user, depending on the needs of the specific application.
First, new management account
There are a number of ways to create a new management account, such as tools such as
Configuration Migration Tool: Yum install http://mirror.centos.org/centos/6/os/x86_64/Packages/migrationtools-47-7.el6.noarch.rpm-ycd/usr/share/migrationtools/ Vim migrate_common.ph# Default DNS Domain$DEFAULT _mail_domain = "ldap.xxxxx.net";72# Default Base$DEFAULT _base = "dc=ldap,dc=xxxxx,dc=net";Key concepts:DN: Unique distinguished NameDC: The area in which it belongsOU: Affiliated OrganizationsCn/uid: Full name/login ID#运行脚本 migrate_base.pl, it creates a root entry that does not create a
HTTP configuration fileModify/etc/httpd/conf.d/phpldapadmin.conf as follows, specific restrictions can be modified according to their own actual situation, I here for the convenience of testing, all open, about the issue of login authentication, we can search the Internet for other data configuration.650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/85/E5/wKioL1etjAGArbpAAABtXRQRWtY223.jpg "title=" Qq20160812164226.jpg "alt=" Wkiol1etjagarbpaaabtxrqrwty223.jpg "/>4. Modify the file/etc
1. OpenLDAP installation and configuration
The LDAP directory stores data in a tree structure. The top layer is the "baseline DN", for example, "DC = mydomain, Dc = org" or "O = mydomain.org ", openldap supports both methods. We use the previous method. The specific installation and configuration process is not described in detail. The problems encountered during this process are generally related to the configuration file. If there is a problem, Please carefully check the slapd. conf file.
Ii.
", "Email":"Mail" } #auth_ldap_mirror_groups = True # copies the LDAP group directly to the Django one, and the auth_ldap_find_group_perms is mutually exclusive. Each time the user logs on, the database's group relationship is updated based on LDAP Auth_ldap_find_group_perms = True#Django obtains permissions from the LDAP group permissions, in this way, Django does not create the group itself, and each request calls the LDAPAuth_ldap_cache_groups = True#when Find_group_perms is turn
/NSSWITCH.CONFHOSTS:LDAP Files DNS
Installing PhpldapadminAdd Epel SourceRPM-IVH http://mirrors.ukfast.co.uk/sites/dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpmInstalling PhpldapadminYum install-y phpldapadminallow access from your networkConfigure the configuration file for Apache ' s phpldapadminVim/etc/httpd/conf.d/phpldapadmin.conf (automatically created) Order Deny,allowdeny from Allallow from 127.0.0.1Allow from:: 1Allow from 1 92.168.0#ps needs to be conf
Contact Us
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.