JavaChap Blog

yum install openldap-servers

1. To use the slapd LDAP server, modify its configuration file /etc/openldap/slapd.conf, to specify the correct domain and server. The suffix line names the domain for which the LDAP server provides information and should be changed from:suffix “dc=your-domain,dc=com”so that it reflects a fully qualified domain name. For example:

   suffix "dc=javachap,dc=com"

2. The rootdn entry is the Distinguished Name (DN) for a user who is unrestricted by access controls or administrative limit parameters set for operations on the LDAP directory. The rootdn user can be thought of as the root user for the LDAP directory. In the configuration file, change the rootdn line from its default value as in the following :

   rootdn "cn=Manager,dc=javachap,dc=com"

3. When populating an LDAP directory over a network, change the rootpw line — replacing the default value with an encrypted password string. To create an encrypted password string, type the following command:

   /usr/sbin/slappasswd

   When prompted, type and then re-type a password. The program prints the resulting encrypted password to the shell prompt. Next, copy the newly created encrypted password into the /etc/openldap/slapd.conf on one of the rootpw lines and remove the hash mark (#). When finished, the line should look similar to the following example:

   rootpw {SSHA}vv2y+i233234azrIv70xSSnNAJ4538bb2u

cp /etc/openldap/DB_CONFIG.example /var/lib/ldap/DB_CONFIG

dn: dc=javachap,dc=com
dc: javachap
objectClass: domain
dn: ou=People,dc=javachap,dc=com
ou: People
objectClass: organizationalUnit
dn: ou=Groups,dc=javachap,dc=com
ou: Groups
objectClass: organizationalUnit

# Engineering Department
dn: ou=Engineering,ou=People,dc=javachap,dc=com
ou: Engineering
objectClass: organizationalUnit

# Admin Group
dn: cn=Admin,ou=Groups,dc=javachap,dc=com
gidNumber: 502
memberUid: admin
memberUid: javachap
cn: Admin
objectClass: posixGroup

# Admin User :
dn: uid=javachap,ou=Engineering,ou=People,dc=javachap,dc=com
sn: Java Chap
userPassword: e235yeXB0f343444bE45Z0s0GmM=
objectClass: shadowAccount
objectClass: person
uid: javachap
cn: Java Chap

# Admin User : admin
dn: uid=admin,ou=Engineering,ou=People,dc=javachap,dc=com
sn: Admin User
userPassword: e2452eXB02222Zk9qYjhUZVBUGmc=
objectClass: shadowAccount
objectClass: person
uid: admin
cn: Administrator

ldapadd -x -D "cn=Manager,dc=javachap,dc=com" -w password -f users.ldif

/sbin/service ldap start