LDAP1-安裝部署LDAP服務

基於Linux部署openldap服務

參考文檔： https://blog.csdn.net/computer1024/article/details/78172785

參考文檔：  https://www.cnblogs.com/linuxws/p/9084455.html

1.部署配置

#關閉SELINUX vim /etc/sysconfig/selinux   # SELINUX=disabled setenforce 0 #關閉防火牆 systemctl stop firewalld systemctl disable firewalld


#安裝了ldap工具

yum install -y openldap-servers openldap-clients migrationtools  #安裝LDAP工具
slappasswd   #據提示輸入密碼會返回加密的密碼字符串，保存好這個字符串

#配置數據庫緩存
cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG 
chown -R ldap:ldap /var/lib/ldap/


#測試配置文件

slaptest -u  #出現configfile testing successed 說明成功了

#啟動ldap

systemctl start slapd.service 
systemctl enable slapd.service

#導入模板

ls /etc/openldap/schema/*.ldif | xargs -I {} sudo ldapadd -Y EXTERNAL -H ldapi:/// -f {}

2.安裝phpldapadmin

#安裝HTTPD yum -y install httpd #修改配置文件 vim /etc/httpd/conf/httpd.conf #AllowOverride all #啟動服務測試 systemctl start httpd systemctl enable httpd curl 127.0.0.1 #安裝phpldapadmin cat /etc/yum.repos.d/epel.repo [epel] name=Extra Packages for Enterprise Linux 7 - $basearch baseurl=https://mirrors.tuna.tsinghua.edu.cn/epel/7Server/x86_64/
enabled=1 gpgcheck=0

yum install phpldapadmin #修改配置文件 $servers->setValue('server','host','127.0.0.1'); $servers->setValue('server','port',389); $servers->setValue('server','base',array('dc=my-domain,dc=com')); $servers->setValue('login','auth_type','session'); $servers->setValue('login','attr','dn'); $servers->setValue('login','attr','dn'); #注釋掉 #修改httpd配置文件 vim /etc/httpd/conf.d/phpldapadmin.conf Alias /phpldapadmin /usr/share/phpldapadmin/htdocs Alias /ldapadmin /usr/share/phpldapadmin/htdocs <Directory /usr/share/phpldapadmin/htdocs>
  <IfModule mod_authz_core.c> # Apache 2.4 Require local Require ip 192.168.0
  </IfModule>
  <IfModule !mod_authz_core.c> # Apache 2.2 Order Deny,Allow Deny from all Allow from 127.0.0.1 Allow from ::1
  </IfModule>
</Directory> #創建基礎目錄 vim /etc/openldap/base.ldif dn: dc=my-domain,dc=com o: ldap objectclass: dcObject objectclass: organization dc: my-domain #重啟httpd服務 service restart httpd #訪問測試 http://192.168.0.41/phpldapadmin

 

3.登錄

登錄LDAP   cn=Manager,dc=my-domain,dc=com  123456

 

4.FAQ

1.如果要更改dc名稱

vim /etc/openldap/slapd.d/cn\=config\/olcDatabase\={2}hdb.ldif

vim /etc/openldap/slapd.d/cn\=config\/olcDatabase\={1}monitor.ldif