openldap-1.2.9-6 (LDAP)

Support

Updated on 16 Mar 2004

(LDAP) = Lightweight Directory Access Protocol

Installation

Install

# rpm -ihv openldap-1.2.9-6.i386.rpm openldap-devel-1.2.9-6.i386.rpm

Create configuration file for SLAPD
Edit /etc/openldap/slapd.conf

If your domain is "hoge.bt", use:

...
database ldbm
suffix "dc=hoge, dc=bt"
rootdn "cn=Manager, dc=hoge, dc=bt"
rootpw secret
...

Start SLAPD

# chkconfig --add ldap
# chkconfig ldap on
# /etc/rc.d/init.d/ldap start

Create ldif file

You use ldapadd to add entries an LDAP directory. LDAP add expects input in LDIF format. Hence, adding entries is done in two steps:

create LDIF file
run ldapadd

User

dn: cn=Luke Howard,ou=people,dc=padl,dc=com

          cn: Luke Howard

          objectclass: top

          objectclass: person

          objectclass: account

          objectclass: organizationalPerson

          objectclass: inetOrgPerson

          objectclass: posixAccount

          mail: [email protected]

          roomnumber:

          homephone:

          givenname: Luke

          sn: Howard

          uid: lukeh

          userpassword: {crypt}*

          loginshell: /bin/csh

          uidnumber: 416

          gidnumber: 10

          homedirectory: /home/lukeh

Mail alias

dn: cn=Postmaster,ou=mailGroups,dc=padl,dc=com

          cn: Postmaster

          objectclass: rfc822MailGroup

          owner: cn=manager,ou=people,dc=padl,dc=com

          mail: lukeh

          mail: root

Mount (as in /etc/fstab)

dn: cn=fileserver:/exports/home,ou=mounts,dc=padl,dc=com

          cn: fileserver:/exports/home

          objectclass: mount

          mountDirectory: /home

          mountType: nfs

          mountDumpFrequency: 0

          mountPassNumber: 0

          mountOption: bg 

          mountOption: soft

          mountOption: timeo=6

Group

dn: cn=staff,ou=groups,dc=padl,dc=com

          cn: staff

          objectclass: posixGroup

          userPassword: {crypt}*

          gidnumber: 10

          memberuid: root

          memberuid: fagen

          memberuid: lukeh

Protocol

dn: cn=icmp,ou=tcpIp,dc=padl,dc=com
cn: icmp
objectclass: ipProtocol
ipProtocolNumber: 1
cn: ICMP

RPC

dn: cn=portmapper,ou=tcpIp,dc=padl,dc=com

          cn: portmapper

          objectclass: oncRPC

          oncRPCNumber: 100000

          cn: portmap

          cn: sunrpc

Service

dn: cn=orasrv,ou=tcpIp,dc=padl,dc=com

          cn: orasrv

          objectclass: ipService

          ipServicePort: 1525

          ipServiceProtocol: tcp

          cn: oracle

Host

dn: cn=www.padl.com,ou=devices,dc=padl,dc=com

          cn: www.padl.com

          objectclass: ipHost

          objectclass: top

          objectclass: device

          ipHostNumber: 192.168.1.1

Network

dn: cn=next-default,ou=tcpIp,dc=padl,dc=com

          cn: next-default

          objectclass: ipNetwork

          ipNetworkNumber: 168.192.1

          ipNetmaskNumber: 255.255.255.0

          cn: NeXTether

          cn: ethernetcn: localnet

Run ldapadd

Run ldapadd to insert these entries into your directory. For example, for "mydomain.com", use:

ldapadd -D -x "cn=Manager, dc=mydomain, dc=com" -W < myldif.ldif

Use ldapsearch

Use ldapsearch to see if slapd is running properly and your added entries exist by running the following command:

ldapsearch -L -b "dc=mydomain, dc=com" -W "(objectclass=*)"

Back