https://wiki.openvz.org/api.php?action=feedcontributions&feedformat=atom&user=Ganesh35 OpenVZ Virtuozzo Containers Wiki - User contributions [en] 2026-06-14T03:01:17Z User contributions MediaWiki 1.31.1 https://wiki.openvz.org/index.php?title=OpenLDAP_Server_in_container&diff=2782 OpenLDAP Server in container 2007-02-20T09:39:56Z <p>Ganesh35: </p> <hr /> <div>&lt;h3&gt;Step by Step Installation and Configuration OpenLDAP Server&lt;/h3&gt;<br /> &lt;b&gt;By Ganesh (ganesh35@gmail.com)&lt;/b&gt;<br /> <br /> Software: OS-Cent OS 4.4, openldap 2.2.13-6.4E&lt;br&gt;<br /> System name: ldap.adminmart.com&lt;br&gt;<br /> Domain name: adminmart.com&lt;br&gt;<br /> System IP: 192.168.1.212&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Use your domain name and IP instead of adminmart&lt;br&gt;<br /> &lt;br&gt;<br /> <br /> &lt;h3&gt;Create VPS with OpenLDAP&lt;/h3&gt;<br /> Create, Install vps with the following information&lt;br&gt;<br /> - vpsid : 212&lt;br&gt;<br /> - vpsip : 192.168.1.212&lt;br&gt;<br /> - vpsname : ldap&lt;br&gt;<br /> - vpshostname : ldap&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Please run these commands on hardware node&lt;br&gt;<br /> &lt;code&gt;<br /> vzctl create 212 --ostemplate centos-4-i386-minimal&lt;br&gt;<br /> vzctl set 212 --ipadd 192.168.1.212 --save&lt;br&gt;<br /> vzctl set 212 --nameserver 202.88.156.6 --save&lt;br&gt;<br /> vzctl set 212 --onboot yes --save&lt;br&gt;<br /> vzctl set 212 --userpasswd root:changeme --save&lt;br&gt;<br /> vzctl set 212 --name ldap --save&lt;br&gt;<br /> vzctl set 212 --hostname ldap --save&lt;br&gt;<br /> vzctl start 212&lt;br&gt;<br /> vzyum 212 install *openldap* -y&lt;br&gt;<br /> &lt;/code&gt;<br /> &lt;h3&gt;Configuration of OpenLDAP Server&lt;/h3&gt;<br /> &lt;b&gt;Easy steps for adding users:&lt;/b&gt;<br /> 1. Create unix user&lt;br&gt;<br /> 2. Create unix user's ldap passwd file&lt;br&gt;<br /> 3. Convert passwd.file to ldif file&lt;br&gt;<br /> 4. Add ldap file to LDAP Directory using ldapadd&lt;br&gt;<br /> &lt;h4&gt;Step #1. Requirements&lt;/h4&gt;<br /> compat-openldap.i386 0:2.1.30-6.4E&lt;br&gt;<br /> openldap-clients.i386 0:2.2.13-6.4E&lt;br&gt;<br /> openldap-devel.i386 0:2.2.13-6.4E&lt;br&gt;<br /> openldap-servers.i386 0:2.2.13-6.4E&lt;br&gt;<br /> openldap-servers-sql.i386 0:2.2.13-6.4E&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;br&gt;<br /> You can install them using the command:&lt;br&gt;<br /> &lt;br&gt;<br /> yum install *openldap* -y &lt;br&gt;<br /> <br /> &lt;h4&gt;Step #2. Start the service&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# chkconfig --levels 235 ldap on&lt;br&gt;<br /> [root@ldap ~]# service ldap start &lt;br&gt;<br /> &lt;/code&gt;<br /> &lt;h4&gt;Step #3. Create LDAP root user password&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# slappasswd&lt;br&gt;<br /> New password:&lt;br&gt;<br /> Re-enter new password:&lt;br&gt;<br /> {SSHA}cWB1VzxDXZLf6F4pwvyNvApBQ8G/DltW&lt;br&gt;<br /> [root@ldap ~]#<br /> &lt;/code&gt;<br /> <br /> &lt;h4&gt;Step #4. Update /etc/openldap/slapd.conf for the root password&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# vi /etc/openldap/slapd.conf&lt;br&gt;<br /> #68 database bdb&lt;br&gt;<br /> #69 suffix &quot;dc=adminmart,dc=com&quot;&lt;br&gt;<br /> #70 rootdn &quot;cn=Manager,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> #71 rootpw {SSHA}cWB1VzxDXZLf6F4pwvyNvApBQ8G/DltW&lt;/code&gt;<br /> <br /> &lt;h4&gt;Step #5. Apply Changes&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# service ldap restart<br /> &lt;/code&gt;<br /> <br /> &lt;h4&gt;Step #6. Create test users&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# useradd test1&lt;br&gt;<br /> [root@ldap ~]# passwd test1&lt;br&gt;<br /> Changing password for user test1.&lt;br&gt;<br /> New UNIX password:&lt;br&gt;<br /> Retype new UNIX password:&lt;br&gt;<br /> passwd: all authentication tokens updated successfully.&lt;br&gt;<br /> [root@ldap ~]# useradd test2&lt;br&gt;<br /> [root@ldap ~]# passwd test2&lt;br&gt;<br /> Changing password for user test2.&lt;br&gt;<br /> New UNIX password:&lt;br&gt;<br /> Retype new UNIX password:&lt;br&gt;<br /> passwd: all authentication tokens updated successfully.&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Repeat the same for the rest of users &lt;br&gt;<br /> <br /> &lt;h4&gt;Step #7. Migrate local users to LDAP&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# grep root /etc/passwd &gt; /etc/openldap/passwd.root&lt;br&gt;<br /> [root@ldap ~]# grep test1 /etc/passwd &gt; /etc/openldap/passwd.test1&lt;br&gt;<br /> [root@ldap ~]# grep test2 /etc/passwd &gt; /etc/openldap/passwd.test2&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Repeat the same for the rest of users&lt;br&gt;<br /> <br /> &lt;h4&gt;Step #8. Update default settings on file /usr/share/openldap/migration/migrate_common.ph&lt;/h4&gt;<br /> #71 $DEFAULT_MAIL_DOMAIN = &quot;adminmart.com&quot;;&lt;br&gt;<br /> #74 $DEFAULT_BASE = &quot;dc=adminmart,dc=com&quot;;&lt;br&gt;<br /> <br /> &lt;h4&gt;Step #9. Convert passwd.file to ldif (LDAP Data Interchange Format) file &lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.root /etc/openldap/root.ldif&lt;br&gt;<br /> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test1 /etc/openldap/test1.ldif&lt;br&gt;<br /> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test2 /etc/openldap/test2.ldif&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Repeat the same for the rest of users&lt;br&gt;<br /> <br /> &lt;h4&gt;Step #10. Update root.ldif file for the &quot;Manager&quot; of LDAP Server &lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# vi /etc/openldap/root.ldif&lt;br&gt;<br /> #1 dn: uid=root,ou=People,dc=adminmart,dc=com&lt;br&gt;<br /> #2 uid: root&lt;br&gt;<br /> #3 cn: Manager&lt;br&gt;<br /> #4 objectClass: account&lt;br&gt;<br /> &lt;/code&gt;<br /> &lt;h4&gt;Step #11. Create a domain ldif file (/etc/openldap/adminmart.com.ldif)&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# cat /etc/openldap/adminmart.com.ldif&lt;br&gt;<br /> dn: dc=adminmart,dc=com&lt;br&gt;<br /> dc: adminmart&lt;br&gt;<br /> description: LDAP Admin&lt;br&gt;<br /> objectClass: dcObject&lt;br&gt;<br /> objectClass: organizationalUnit&lt;br&gt;<br /> ou: rootobject&lt;br&gt;<br /> &lt;br&gt;<br /> dn: ou=People, dc=adminmart,dc=com&lt;br&gt;<br /> ou: People&lt;br&gt;<br /> description: Users of adminmart&lt;br&gt;<br /> objectClass: organizationalUnit&lt;br&gt;<br /> &lt;/code&gt; <br /> &lt;h4&gt;Step #12. Import all users in to the LDAP&lt;/h4&gt;<br /> &lt;b&gt;Add the Domain ldif file &lt;/b&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;code&gt;<br /> <br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/adminmart.com.ldif&lt;br&gt;<br /> Enter LDAP Password:&lt;br&gt;<br /> adding new entry &quot;dc=adminmart,dc=com&quot;&lt;br&gt;<br /> adding new entry &quot;ou=People, dc=adminmart,dc=com&quot;&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;b&gt;Add the Users&lt;/b&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/root.ldif&lt;br&gt;<br /> Enter LDAP Password:&lt;br&gt;<br /> adding new entry &quot;uid=root,ou=People,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> adding new entry &quot;uid=operator,ou=People,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;br&gt;<br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/test1.ldif&lt;br&gt;<br /> Enter LDAP Password:&lt;br&gt;<br /> adding new entry &quot;uid=test1,ou=People,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;br&gt;<br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/test2.ldif&lt;br&gt;<br /> Enter LDAP Password:&lt;br&gt;<br /> adding new entry &quot;uid=test2,ou=People,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Repeat the same for the rest of users&lt;br&gt;<br /> <br /> &lt;h4&gt;Step #13. Apply Changes &lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# service ldap restart&lt;/code&gt; &lt;br&gt;<br /> <br /> &lt;h4&gt;Step #14. Test LDAP Server&lt;/h4&gt;<br /> It prints all the user information&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# ldapsearch -x -b 'dc=adminmart,dc=com' '(objectclass=*)'&lt;/code&gt; &lt;br&gt;<br /> &lt;br&gt;<br /> &lt;br&gt;<br /> &lt;h3&gt;LDAP Client Configuration&lt;/h3&gt;<br /> &lt;code&gt; <br /> [root@ldapclient ~]# authconfig &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt; [*] Use LDAP [*] Use LDAP Authentication &lt;/b&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> [Both should be checked]&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;b&gt; [ ] Use TLS &lt;br&gt;<br /> Server: ldap.adminmart.com&lt;br&gt;<br /> Base DN: dc=adminmart,dc=com&lt;br&gt;<br /> &lt;/b&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> [[Category:HOWTO]]</div> Ganesh35 https://wiki.openvz.org/index.php?title=OpenLDAP_Server_in_container&diff=2781 OpenLDAP Server in container 2007-02-20T09:39:05Z <p>Ganesh35: </p> <hr /> <div>&lt;h3&gt;Step by Step Installation and Configuration OpenLDAP Server&lt;/h3&gt;<br /> &lt;h4&gt;By Ganesh (&lt;a href=&quot;mailto:ganesh35@gmail.com&quot;&gt;ganesh35@gmail.com&lt;/a&gt;) &lt;/h4&gt;<br /> <br /> Software: OS-Cent OS 4.4, openldap 2.2.13-6.4E&lt;br&gt;<br /> System name: ldap.adminmart.com&lt;br&gt;<br /> Domain name: adminmart.com&lt;br&gt;<br /> System IP: 192.168.1.212&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Use your domain name and IP instead of adminmart&lt;br&gt;<br /> &lt;br&gt;<br /> <br /> &lt;h3&gt;Create VPS with OpenLDAP&lt;/h3&gt;<br /> Create, Install vps with the following information&lt;br&gt;<br /> - vpsid : 212&lt;br&gt;<br /> - vpsip : 192.168.1.212&lt;br&gt;<br /> - vpsname : ldap&lt;br&gt;<br /> - vpshostname : ldap&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Please run these commands on hardware node&lt;br&gt;<br /> &lt;code&gt;<br /> vzctl create 212 --ostemplate centos-4-i386-minimal&lt;br&gt;<br /> vzctl set 212 --ipadd 192.168.1.212 --save&lt;br&gt;<br /> vzctl set 212 --nameserver 202.88.156.6 --save&lt;br&gt;<br /> vzctl set 212 --onboot yes --save&lt;br&gt;<br /> vzctl set 212 --userpasswd root:changeme --save&lt;br&gt;<br /> vzctl set 212 --name ldap --save&lt;br&gt;<br /> vzctl set 212 --hostname ldap --save&lt;br&gt;<br /> vzctl start 212&lt;br&gt;<br /> vzyum 212 install *openldap* -y&lt;br&gt;<br /> &lt;/code&gt;<br /> &lt;h3&gt;Configuration of OpenLDAP Server&lt;/h3&gt;<br /> &lt;b&gt;Easy steps for adding users:&lt;/b&gt;<br /> 1. Create unix user&lt;br&gt;<br /> 2. Create unix user's ldap passwd file&lt;br&gt;<br /> 3. Convert passwd.file to ldif file&lt;br&gt;<br /> 4. Add ldap file to LDAP Directory using ldapadd&lt;br&gt;<br /> &lt;h4&gt;Step #1. Requirements&lt;/h4&gt;<br /> compat-openldap.i386 0:2.1.30-6.4E&lt;br&gt;<br /> openldap-clients.i386 0:2.2.13-6.4E&lt;br&gt;<br /> openldap-devel.i386 0:2.2.13-6.4E&lt;br&gt;<br /> openldap-servers.i386 0:2.2.13-6.4E&lt;br&gt;<br /> openldap-servers-sql.i386 0:2.2.13-6.4E&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;br&gt;<br /> You can install them using the command:&lt;br&gt;<br /> &lt;br&gt;<br /> yum install *openldap* -y &lt;br&gt;<br /> <br /> &lt;h4&gt;Step #2. Start the service&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# chkconfig --levels 235 ldap on&lt;br&gt;<br /> [root@ldap ~]# service ldap start &lt;br&gt;<br /> &lt;/code&gt;<br /> &lt;h4&gt;Step #3. Create LDAP root user password&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# slappasswd&lt;br&gt;<br /> New password:&lt;br&gt;<br /> Re-enter new password:&lt;br&gt;<br /> {SSHA}cWB1VzxDXZLf6F4pwvyNvApBQ8G/DltW&lt;br&gt;<br /> [root@ldap ~]#<br /> &lt;/code&gt;<br /> <br /> &lt;h4&gt;Step #4. Update /etc/openldap/slapd.conf for the root password&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# vi /etc/openldap/slapd.conf&lt;br&gt;<br /> #68 database bdb&lt;br&gt;<br /> #69 suffix &quot;dc=adminmart,dc=com&quot;&lt;br&gt;<br /> #70 rootdn &quot;cn=Manager,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> #71 rootpw {SSHA}cWB1VzxDXZLf6F4pwvyNvApBQ8G/DltW&lt;/code&gt;<br /> <br /> &lt;h4&gt;Step #5. Apply Changes&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# service ldap restart<br /> &lt;/code&gt;<br /> <br /> &lt;h4&gt;Step #6. Create test users&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# useradd test1&lt;br&gt;<br /> [root@ldap ~]# passwd test1&lt;br&gt;<br /> Changing password for user test1.&lt;br&gt;<br /> New UNIX password:&lt;br&gt;<br /> Retype new UNIX password:&lt;br&gt;<br /> passwd: all authentication tokens updated successfully.&lt;br&gt;<br /> [root@ldap ~]# useradd test2&lt;br&gt;<br /> [root@ldap ~]# passwd test2&lt;br&gt;<br /> Changing password for user test2.&lt;br&gt;<br /> New UNIX password:&lt;br&gt;<br /> Retype new UNIX password:&lt;br&gt;<br /> passwd: all authentication tokens updated successfully.&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Repeat the same for the rest of users &lt;br&gt;<br /> <br /> &lt;h4&gt;Step #7. Migrate local users to LDAP&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# grep root /etc/passwd &gt; /etc/openldap/passwd.root&lt;br&gt;<br /> [root@ldap ~]# grep test1 /etc/passwd &gt; /etc/openldap/passwd.test1&lt;br&gt;<br /> [root@ldap ~]# grep test2 /etc/passwd &gt; /etc/openldap/passwd.test2&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Repeat the same for the rest of users&lt;br&gt;<br /> <br /> &lt;h4&gt;Step #8. Update default settings on file /usr/share/openldap/migration/migrate_common.ph&lt;/h4&gt;<br /> #71 $DEFAULT_MAIL_DOMAIN = &quot;adminmart.com&quot;;&lt;br&gt;<br /> #74 $DEFAULT_BASE = &quot;dc=adminmart,dc=com&quot;;&lt;br&gt;<br /> <br /> &lt;h4&gt;Step #9. Convert passwd.file to ldif (LDAP Data Interchange Format) file &lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.root /etc/openldap/root.ldif&lt;br&gt;<br /> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test1 /etc/openldap/test1.ldif&lt;br&gt;<br /> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test2 /etc/openldap/test2.ldif&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Repeat the same for the rest of users&lt;br&gt;<br /> <br /> &lt;h4&gt;Step #10. Update root.ldif file for the &quot;Manager&quot; of LDAP Server &lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# vi /etc/openldap/root.ldif&lt;br&gt;<br /> #1 dn: uid=root,ou=People,dc=adminmart,dc=com&lt;br&gt;<br /> #2 uid: root&lt;br&gt;<br /> #3 cn: Manager&lt;br&gt;<br /> #4 objectClass: account&lt;br&gt;<br /> &lt;/code&gt;<br /> &lt;h4&gt;Step #11. Create a domain ldif file (/etc/openldap/adminmart.com.ldif)&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# cat /etc/openldap/adminmart.com.ldif&lt;br&gt;<br /> dn: dc=adminmart,dc=com&lt;br&gt;<br /> dc: adminmart&lt;br&gt;<br /> description: LDAP Admin&lt;br&gt;<br /> objectClass: dcObject&lt;br&gt;<br /> objectClass: organizationalUnit&lt;br&gt;<br /> ou: rootobject&lt;br&gt;<br /> &lt;br&gt;<br /> dn: ou=People, dc=adminmart,dc=com&lt;br&gt;<br /> ou: People&lt;br&gt;<br /> description: Users of adminmart&lt;br&gt;<br /> objectClass: organizationalUnit&lt;br&gt;<br /> &lt;/code&gt; <br /> &lt;h4&gt;Step #12. Import all users in to the LDAP&lt;/h4&gt;<br /> &lt;b&gt;Add the Domain ldif file &lt;/b&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;code&gt;<br /> <br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/adminmart.com.ldif&lt;br&gt;<br /> Enter LDAP Password:&lt;br&gt;<br /> adding new entry &quot;dc=adminmart,dc=com&quot;&lt;br&gt;<br /> adding new entry &quot;ou=People, dc=adminmart,dc=com&quot;&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;b&gt;Add the Users&lt;/b&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/root.ldif&lt;br&gt;<br /> Enter LDAP Password:&lt;br&gt;<br /> adding new entry &quot;uid=root,ou=People,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> adding new entry &quot;uid=operator,ou=People,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;br&gt;<br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/test1.ldif&lt;br&gt;<br /> Enter LDAP Password:&lt;br&gt;<br /> adding new entry &quot;uid=test1,ou=People,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;br&gt;<br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/test2.ldif&lt;br&gt;<br /> Enter LDAP Password:&lt;br&gt;<br /> adding new entry &quot;uid=test2,ou=People,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Repeat the same for the rest of users&lt;br&gt;<br /> <br /> &lt;h4&gt;Step #13. Apply Changes &lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# service ldap restart&lt;/code&gt; &lt;br&gt;<br /> <br /> &lt;h4&gt;Step #14. Test LDAP Server&lt;/h4&gt;<br /> It prints all the user information&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# ldapsearch -x -b 'dc=adminmart,dc=com' '(objectclass=*)'&lt;/code&gt; &lt;br&gt;<br /> &lt;br&gt;<br /> &lt;br&gt;<br /> &lt;h3&gt;LDAP Client Configuration&lt;/h3&gt;<br /> &lt;code&gt; <br /> [root@ldapclient ~]# authconfig &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt; [*] Use LDAP [*] Use LDAP Authentication &lt;/b&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> [Both should be checked]&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;b&gt; [ ] Use TLS &lt;br&gt;<br /> Server: ldap.adminmart.com&lt;br&gt;<br /> Base DN: dc=adminmart,dc=com&lt;br&gt;<br /> &lt;/b&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> [[Category:HOWTO]]</div> Ganesh35 https://wiki.openvz.org/index.php?title=OpenLDAP_Server_in_container&diff=2745 OpenLDAP Server in container 2007-02-10T19:42:36Z <p>Ganesh35: </p> <hr /> <div>&lt;h3&gt;Step by Step Installation and Configuration OpenLDAP Server&lt;/h3&gt;<br /> <br /> Software: OS-Cent OS 4.4, openldap 2.2.13-6.4E&lt;br&gt;<br /> System name: ldap.adminmart.com&lt;br&gt;<br /> Domain name: adminmart.com&lt;br&gt;<br /> System IP: 192.168.1.212&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Use your domain name and IP instead of adminmart&lt;br&gt;<br /> &lt;br&gt;<br /> <br /> &lt;h3&gt;Create VPS with OpenLDAP&lt;/h3&gt;<br /> Create, Install vps with the following information&lt;br&gt;<br /> - vpsid : 212&lt;br&gt;<br /> - vpsip : 192.168.1.212&lt;br&gt;<br /> - vpsname : ldap&lt;br&gt;<br /> - vpshostname : ldap&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Please run these commands on hardware node&lt;br&gt;<br /> &lt;code&gt;<br /> vzctl create 212 --ostemplate centos-4-i386-minimal&lt;br&gt;<br /> vzctl set 212 --ipadd 192.168.1.212 --save&lt;br&gt;<br /> vzctl set 212 --nameserver 202.88.156.6 --save&lt;br&gt;<br /> vzctl set 212 --onboot yes --save&lt;br&gt;<br /> vzctl set 212 --userpasswd root:changeme --save&lt;br&gt;<br /> vzctl set 212 --name ldap --save&lt;br&gt;<br /> vzctl set 212 --hostname ldap --save&lt;br&gt;<br /> vzctl start 212&lt;br&gt;<br /> vzyum 212 install *openldap* -y&lt;br&gt;<br /> &lt;/code&gt;<br /> &lt;h3&gt;Configuration of OpenLDAP Server&lt;/h3&gt;<br /> &lt;b&gt;Easy steps for adding users:&lt;/b&gt;<br /> 1. Create unix user&lt;br&gt;<br /> 2. Create unix user's ldap passwd file&lt;br&gt;<br /> 3. Convert passwd.file to ldif file&lt;br&gt;<br /> 4. Add ldap file to LDAP Directory using ldapadd&lt;br&gt;<br /> &lt;h4&gt;Step #1. Requirements&lt;/h4&gt;<br /> compat-openldap.i386 0:2.1.30-6.4E&lt;br&gt;<br /> openldap-clients.i386 0:2.2.13-6.4E&lt;br&gt;<br /> openldap-devel.i386 0:2.2.13-6.4E&lt;br&gt;<br /> openldap-servers.i386 0:2.2.13-6.4E&lt;br&gt;<br /> openldap-servers-sql.i386 0:2.2.13-6.4E&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;br&gt;<br /> You can install them using the command:&lt;br&gt;<br /> &lt;br&gt;<br /> yum install *openldap* -y &lt;br&gt;<br /> <br /> &lt;h4&gt;Step #2. Start the service&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# chkconfig --levels 235 ldap on&lt;br&gt;<br /> [root@ldap ~]# service ldap start &lt;br&gt;<br /> &lt;/code&gt;<br /> &lt;h4&gt;Step #3. Create LDAP root user password&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# slappasswd&lt;br&gt;<br /> New password:&lt;br&gt;<br /> Re-enter new password:&lt;br&gt;<br /> {SSHA}cWB1VzxDXZLf6F4pwvyNvApBQ8G/DltW&lt;br&gt;<br /> [root@ldap ~]#<br /> &lt;/code&gt;<br /> <br /> &lt;h4&gt;Step #4. Update /etc/openldap/slapd.conf for the root password&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# vi /etc/openldap/slapd.conf&lt;br&gt;<br /> #68 database bdb&lt;br&gt;<br /> #69 suffix &quot;dc=adminmart,dc=com&quot;&lt;br&gt;<br /> #70 rootdn &quot;cn=Manager,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> #71 rootpw {SSHA}cWB1VzxDXZLf6F4pwvyNvApBQ8G/DltW&lt;/code&gt;<br /> <br /> &lt;h4&gt;Step #5. Apply Changes&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# service ldap restart<br /> &lt;/code&gt;<br /> <br /> &lt;h4&gt;Step #6. Create test users&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# useradd test1&lt;br&gt;<br /> [root@ldap ~]# passwd test1&lt;br&gt;<br /> Changing password for user test1.&lt;br&gt;<br /> New UNIX password:&lt;br&gt;<br /> Retype new UNIX password:&lt;br&gt;<br /> passwd: all authentication tokens updated successfully.&lt;br&gt;<br /> [root@ldap ~]# useradd test2&lt;br&gt;<br /> [root@ldap ~]# passwd test2&lt;br&gt;<br /> Changing password for user test2.&lt;br&gt;<br /> New UNIX password:&lt;br&gt;<br /> Retype new UNIX password:&lt;br&gt;<br /> passwd: all authentication tokens updated successfully.&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Repeat the same for the rest of users &lt;br&gt;<br /> <br /> &lt;h4&gt;Step #7. Migrate local users to LDAP&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# grep root /etc/passwd &gt; /etc/openldap/passwd.root&lt;br&gt;<br /> [root@ldap ~]# grep test1 /etc/passwd &gt; /etc/openldap/passwd.test1&lt;br&gt;<br /> [root@ldap ~]# grep test2 /etc/passwd &gt; /etc/openldap/passwd.test2&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Repeat the same for the rest of users&lt;br&gt;<br /> <br /> &lt;h4&gt;Step #8. Update default settings on file /usr/share/openldap/migration/migrate_common.ph&lt;/h4&gt;<br /> #71 $DEFAULT_MAIL_DOMAIN = &quot;adminmart.com&quot;;&lt;br&gt;<br /> #74 $DEFAULT_BASE = &quot;dc=adminmart,dc=com&quot;;&lt;br&gt;<br /> <br /> &lt;h4&gt;Step #9. Convert passwd.file to ldif (LDAP Data Interchange Format) file &lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.root /etc/openldap/root.ldif&lt;br&gt;<br /> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test1 /etc/openldap/test1.ldif&lt;br&gt;<br /> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test2 /etc/openldap/test2.ldif&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Repeat the same for the rest of users&lt;br&gt;<br /> <br /> &lt;h4&gt;Step #10. Update root.ldif file for the &quot;Manager&quot; of LDAP Server &lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# vi /etc/openldap/root.ldif&lt;br&gt;<br /> #1 dn: uid=root,ou=People,dc=adminmart,dc=com&lt;br&gt;<br /> #2 uid: root&lt;br&gt;<br /> #3 cn: Manager&lt;br&gt;<br /> #4 objectClass: account&lt;br&gt;<br /> &lt;/code&gt;<br /> &lt;h4&gt;Step #11. Create a domain ldif file (/etc/openldap/adminmart.com.ldif)&lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# cat /etc/openldap/adminmart.com.ldif&lt;br&gt;<br /> dn: dc=adminmart,dc=com&lt;br&gt;<br /> dc: adminmart&lt;br&gt;<br /> description: LDAP Admin&lt;br&gt;<br /> objectClass: dcObject&lt;br&gt;<br /> objectClass: organizationalUnit&lt;br&gt;<br /> ou: rootobject&lt;br&gt;<br /> &lt;br&gt;<br /> dn: ou=People, dc=adminmart,dc=com&lt;br&gt;<br /> ou: People&lt;br&gt;<br /> description: Users of adminmart&lt;br&gt;<br /> objectClass: organizationalUnit&lt;br&gt;<br /> &lt;/code&gt; <br /> &lt;h4&gt;Step #12. Import all users in to the LDAP&lt;/h4&gt;<br /> &lt;b&gt;Add the Domain ldif file &lt;/b&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;code&gt;<br /> <br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/adminmart.com.ldif&lt;br&gt;<br /> Enter LDAP Password:&lt;br&gt;<br /> adding new entry &quot;dc=adminmart,dc=com&quot;&lt;br&gt;<br /> adding new entry &quot;ou=People, dc=adminmart,dc=com&quot;&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;b&gt;Add the Users&lt;/b&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/root.ldif&lt;br&gt;<br /> Enter LDAP Password:&lt;br&gt;<br /> adding new entry &quot;uid=root,ou=People,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> adding new entry &quot;uid=operator,ou=People,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;br&gt;<br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/test1.ldif&lt;br&gt;<br /> Enter LDAP Password:&lt;br&gt;<br /> adding new entry &quot;uid=test1,ou=People,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;br&gt;<br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/test2.ldif&lt;br&gt;<br /> Enter LDAP Password:&lt;br&gt;<br /> adding new entry &quot;uid=test2,ou=People,dc=adminmart,dc=com&quot;&lt;br&gt;<br /> [root@ldap ~]#&lt;br&gt;<br /> &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt;Note:&lt;/b&gt; Repeat the same for the rest of users&lt;br&gt;<br /> <br /> &lt;h4&gt;Step #13. Apply Changes &lt;/h4&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# service ldap restart&lt;/code&gt; &lt;br&gt;<br /> <br /> &lt;h4&gt;Step #14. Test LDAP Server&lt;/h4&gt;<br /> It prints all the user information&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;code&gt;<br /> [root@ldap ~]# ldapsearch -x -b 'dc=adminmart,dc=com' '(objectclass=*)'&lt;/code&gt; &lt;br&gt;<br /> &lt;br&gt;<br /> &lt;br&gt;<br /> &lt;h3&gt;LDAP Client Configuration&lt;/h3&gt;<br /> &lt;code&gt; <br /> [root@ldapclient ~]# authconfig &lt;/code&gt;&lt;br&gt;<br /> &lt;b&gt; [*] Use LDAP [*] Use LDAP Authentication &lt;/b&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> [Both should be checked]&lt;br&gt;<br /> &lt;br&gt;<br /> &lt;b&gt; [ ] Use TLS &lt;br&gt;<br /> Server: ldap.adminmart.com&lt;br&gt;<br /> Base DN: dc=adminmart,dc=com&lt;br&gt;<br /> &lt;/b&gt;&lt;br&gt;<br /> &lt;br&gt;<br /> [[Category:HOWTO]]</div> Ganesh35 https://wiki.openvz.org/index.php?title=OpenLDAP_Server_in_container&diff=2744 OpenLDAP Server in container 2007-02-10T19:10:45Z <p>Ganesh35: New page: &lt;h3&gt;Step by Step Installation and Configuration OpenLDAP Server&lt;/h3&gt; Software: OS-Cent OS 4.4, openldap 2.2.13-6.4E System name: ldap.adminmart.com Domain name: adminmart.com System IP: 1...</p> <hr /> <div>&lt;h3&gt;Step by Step Installation and Configuration OpenLDAP Server&lt;/h3&gt;<br /> <br /> Software: OS-Cent OS 4.4, openldap 2.2.13-6.4E<br /> System name: ldap.adminmart.com<br /> Domain name: adminmart.com<br /> System IP: 192.168.1.212<br /> <br /> Note: Use your domain name and IP instead of adminmart<br /> <br /> Easy steps for adding users:<br /> 1. Create unix user<br /> 2. Create unix user's ldap passwd file<br /> 3. Convert passwd.file to ldif file<br /> 4. Add ldap file to LDAP Directory using ldapadd<br /> <br /> Step #1. Requirements<br /> <br /> compat-openldap.i386 0:2.1.30-6.4E<br /> openldap-clients.i386 0:2.2.13-6.4E<br /> openldap-devel.i386 0:2.2.13-6.4E<br /> openldap-servers.i386 0:2.2.13-6.4E<br /> openldap-servers-sql.i386 0:2.2.13-6.4E<br /> <br /> <br /> You can install them using the command:<br /> <br /> yum install *openldap* -y <br /> <br /> <br /> Step #2. Start the service<br /> <br /> &lt;code&gt;[root@ldap ~]# chkconfig --levels 235 ldap on<br /> [root@ldap ~]# service ldap start <br /> &lt;/code&gt;<br /> Step #3. Create LDAP root user password<br /> <br /> &lt;code&gt;[root@ldap ~]# slappasswd<br /> New password:<br /> Re-enter new password:<br /> {SSHA}cWB1VzxDXZLf6F4pwvyNvApBQ8G/DltW<br /> [root@ldap ~]#&lt;/code&gt;<br /> Step #4. Update /etc/openldap/slapd.conf for the root password<br /> <br /> &lt;code&gt;[root@ldap ~]# vi /etc/openldap/slapd.conf<br /> #68 database bdb<br /> #69 suffix &quot;dc=adminmart,dc=com&quot;<br /> #70 rootdn &quot;cn=Manager,dc=adminmart,dc=com&quot;<br /> #71 rootpw {SSHA}cWB1VzxDXZLf6F4pwvyNvApBQ8G/DltW&lt;/code&gt; <br /> Step #5. Apply Changes<br /> <br /> &lt;code&gt;[root@ldap ~]# service ldap restart&lt;/code&gt; <br /> Step #6. Create test users<br /> <br /> &lt;code&gt;[root@ldap ~]# useradd test1<br /> [root@ldap ~]# passwd test1<br /> Changing password for user test1.<br /> New UNIX password:<br /> Retype new UNIX password:<br /> passwd: all authentication tokens updated successfully.<br /> [root@ldap ~]# useradd test2<br /> [root@ldap ~]# passwd test2<br /> Changing password for user test2.<br /> New UNIX password:<br /> Retype new UNIX password:<br /> passwd: all authentication tokens updated successfully.<br /> [root@ldap ~]#<br /> &lt;/code&gt;<br /> Note: Repeat the same for the rest of users <br /> Step #7. Migrate local users to LDAP<br /> <br /> &lt;code&gt;[root@ldap ~]# grep root /etc/passwd &gt; /etc/openldap/passwd.root<br /> [root@ldap ~]# grep test1 /etc/passwd &gt; /etc/openldap/passwd.test1<br /> [root@ldap ~]# grep test2 /etc/passwd &gt; /etc/openldap/passwd.test2<br /> &lt;/code&gt;<br /> Note: Repeat the same for the rest of users<br /> Step #8. Update default settings on file /usr/share/openldap/migration/migrate_common.ph<br /> <br /> #71 $DEFAULT_MAIL_DOMAIN = &quot;adminmart.com&quot;;<br /> #74 $DEFAULT_BASE = &quot;dc=adminmart,dc=com&quot;;<br /> Step #9. Convert passwd.file to ldif (LDAP Data Interchange Format) file <br /> <br /> &lt;code&gt;[root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.root /etc/openldap/root.ldif<br /> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test1 /etc/openldap/test1.ldif<br /> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test2 /etc/openldap/test2.ldif<br /> &lt;/code&gt;<br /> Note: Repeat the same for the rest of users<br /> Step #10. Update root.ldif file for the &quot;Manager&quot; of LDAP Server <br /> <br /> [root@ldap ~]# vi /etc/openldap/root.ldif<br /> #1 dn: uid=root,ou=People,dc=adminmart,dc=com<br /> #2 uid: root<br /> #3 cn: Manager<br /> #4 objectClass: account<br /> <br /> Step #11. Create a domain ldif file (/etc/openldap/adminmart.com.ldif)<br /> <br /> [root@ldap ~]# cat /etc/openldap/adminmart.com.ldif<br /> dn: dc=adminmart,dc=com<br /> dc: adminmart<br /> description: LDAP Admin<br /> objectClass: dcObject<br /> objectClass: organizationalUnit<br /> ou: rootobject<br /> <br /> dn: ou=People, dc=adminmart,dc=com<br /> ou: People<br /> description: Users of adminmart<br /> objectClass: organizationalUnit<br /> <br /> Step #12. Import all users in to the LDAP<br /> <br /> Add the Domain ldif file <br /> <br /> &lt;code&gt;[root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/adminmart.com.ldif<br /> Enter LDAP Password:<br /> adding new entry &quot;dc=adminmart,dc=com&quot;<br /> adding new entry &quot;ou=People, dc=adminmart,dc=com&quot;<br /> [root@ldap ~]#<br /> &lt;/code&gt;<br /> <br /> Add the Users<br /> <br /> &lt;code&gt;[root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/root.ldif<br /> Enter LDAP Password:<br /> adding new entry &quot;uid=root,ou=People,dc=adminmart,dc=com&quot;<br /> adding new entry &quot;uid=operator,ou=People,dc=adminmart,dc=com&quot;<br /> [root@ldap ~]#<br /> <br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/test1.ldif<br /> Enter LDAP Password:<br /> adding new entry &quot;uid=test1,ou=People,dc=adminmart,dc=com&quot;<br /> [root@ldap ~]#<br /> <br /> [root@ldap ~]# ldapadd -x -D &quot;cn=Manager,dc=adminmart,dc=com&quot; -W -f /etc/openldap/test2.ldif<br /> Enter LDAP Password:<br /> adding new entry &quot;uid=test2,ou=People,dc=adminmart,dc=com&quot;<br /> [root@ldap ~]#<br /> <br /> &lt;/code&gt;<br /> Note: Repeat the same for the rest of users<br /> <br /> Step #13. Apply Changes <br /> <br /> &lt;code&gt;[root@ldap ~]# service ldap restart&lt;/code&gt; <br /> <br /> Step #14. Test LDAP Server<br /> It prints all the user information<br /> <br /> &lt;code&gt;[root@ldap ~]# ldapsearch -x -b 'dc=adminmart,dc=com' '(objectclass=*)'&lt;/code&gt; <br /> <br /> <br /> <br /> [[Category:HOWTO]]</div> Ganesh35