<h3>Step by Step Installation and Configuration OpenLDAP Server</h3><b>By Ganesh (ganesh35@gmail.com)</b>

='''Note:''' Use your domain name and IP instead of adminmart == Create container with OpenLDAP ===

<h3>== Configuration of OpenLDAP Server</h3>==<b>Easy steps for adding users:</b>1. # Create unix user<br>2. # Create unix user's ldap passwd file<br>3. # Convert passwd.file to ldif file<br>4. # Add ldap file to LDAP Directory using ldapadd<br><h4>Step #1. === Requirements</h4>=== compat-openldap.i386 0:2.1.30-6.4E<br> openldap-clients.i386 0:2.2.13-6.4E<br> openldap-devel.i386 0:2.2.13-6.4E<br> openldap-servers.i386 0:2.2.13-6.4E<br> openldap-servers-sql.i386 0:2.2.13-6.4E<br><br><br>You can install them using the command:<br><br> yum install *openldap* -y <br> === Start the service ===

<h4>Step #2. Start the service</h4><code> [root@ldap ~]# chkconfig --levels 235 ldap on<br>

</code><h4>Step #3. === Create LDAP root user password</h4>===<code> [root@ldap ~]# slappasswd<br> New password:<br> Re-enter new password:<br> {SSHA}cWB1VzxDXZLf6F4pwvyNvApBQ8G/DltW<br>

<h4>Step === Update /etc/openldap/slapd.conf for the root password ===  [root@ldap ~]#5vi /etc/openldap/slapd. conf #68 database bdb #69 suffix "dc=adminmart,dc=com" #70 rootdn "cn=Manager,dc=adminmart,dc=com" #71 rootpw {SSHA}cWB1VzxDXZLf6F4pwvyNvApBQ8G/DltW === Apply Changes</h4>===<code>

<h4>Step #6. === Create test users</h4>===<code> [root@ldap ~]# useradd test1<br> [root@ldap ~]# passwd test1<br> Changing password for user test1.<br> New UNIX password:<br> Retype new UNIX password:<br> passwd: all authentication tokens updated successfully.<br> [root@ldap ~]# useradd test2<br> [root@ldap ~]# passwd test2<br> Changing password for user test2.<br> New UNIX password:<br> Retype new UNIX password:<br> passwd: all authentication tokens updated successfully.<br [root@ldap ~]# '''Note:''' Repeat the same for the rest of users. === Migrate local users to LDAP ===  [root@ldap ~]# grep root /etc/passwd >/etc/openldap/passwd.root [root@ldap ~]#<brgrep test1 /etc/passwd >/etc/openldap/passwd.test1 <[root@ldap ~]# grep test2 /code><bretc/passwd >/etc/openldap/passwd.test2 <b>'''Note:<''' Repeat the same for the rest of users. === Update default settings on file /usr/share/openldap/migration/migrate_common.ph ===  #71 $DEFAULT_MAIL_DOMAIN = "adminmart.com"; #74 $DEFAULT_BASE = "dc=adminmart,dc=com"; === Convert passwd.file to ldif (LDAP Data Interchange Format) file ===  [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.root /etc/openldap/root.ldif [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test1 /etc/openldap/test1.ldif [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test2 /etc/openldap/b> test2.ldif '''Note:''' Repeat the same for the rest of users <br>. === Update root.ldif file for the "Manager" of LDAP Server ===  [root@ldap ~]# vi /etc/openldap/root.ldif #1 dn: uid=root,ou=People,dc=adminmart,dc=com #2 uid: root #3 cn: Manager #4 objectClass: account === Create a domain ldif file (/etc/openldap/adminmart.com.ldif) ===  [root@ldap ~]# cat /etc/openldap/adminmart.com.ldif dn: dc=adminmart,dc=com dc: adminmart description: LDAP Admin objectClass: dcObject objectClass: organizationalUnit ou: rootobject dn: ou=People, dc=adminmart,dc=com ou: People description: Users of adminmart objectClass: organizationalUnit === Import all users in to the LDAP === Add the Domain ldif file:  [root@ldap ~]# ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/adminmart.com.ldif Enter LDAP Password: adding new entry "dc=adminmart,dc=com" adding new entry "ou=People, dc=adminmart,dc=com" [root@ldap ~]# Add the Users:

<h4>Step #7. Migrate local users to LDAP</h4><code> [root@ldap ~]# grep root /etc/passwd > ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/passwdroot.ldif Enter LDAP Password: adding new entry "uid=root<br>,ou=People,dc=adminmart,dc=com" [root@ldap ~]# grep test1 /etc/passwd > /etc/openldap/passwd.test1<br>adding new entry "uid=operator,ou=People,dc=adminmart,dc=com" [root@ldap ~]# grep test2 /etc/passwd > /etc/openldap/passwd.test2<br></code><br><b>Note:</b> Repeat the same for the rest of users<br>

<h4>Step [root@ldap ~]#8. Update default settings on file /usrldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /shareetc/openldap/migration/migrate_commontest1.ph</h4>ldif #71 $DEFAULT_MAIL_DOMAIN = "adminmart.com";<br>Enter LDAP Password: #74 $DEFAULT_BASE adding new entry "uid=test1,ou= "People,dc=adminmart,dc=com";<br> [root@ldap ~]#

<h4>Step #9. Convert passwd.file to ldif (LDAP Data Interchange Format) file </h4><code> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/passwd.root /etc/openldap/roottest2.ldif<br> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test1 /etc/openldap/test1.ldif<br>Enter LDAP Password: adding new entry "uid=test2,ou=People,dc=adminmart,dc=com" [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test2 /etc/openldap/test2.ldif<br></code><br><b>Note:</b> Repeat the same for the rest of users<br>

<h4>Step #10. Update root.ldif file '''Note:''' Repeat the same for the "Manager" rest of LDAP Server </h4><code> [root@ldap ~]# vi /etc/openldap/rootusers.ldif<br> #1 dn: uid=root,ou=People,dc=adminmart,dc=com<br> #2 uid: root<br> #3 cn: Manager<br> #4 objectClass: account<br></code><h4>Step #11. Create a domain ldif file (/etc/openldap/adminmart.com.ldif)</h4><code> [root@ldap ~]# cat /etc/openldap/adminmart.com.ldif<br> dn: dc=adminmart,dc=com<br> dc: adminmart<br> description: LDAP Admin<br> objectClass: dcObject<br> objectClass: organizationalUnit<br> ou: rootobject<br> <br> dn: ou=People, dc=adminmart,dc=com<br> ou: People<br> description: Users of adminmart<br> objectClass: organizationalUnit<br></code> <h4>Step #12. Import all users in to the LDAP</h4><b>Add the Domain ldif file </b><br><br><code>

[root@ldap ~]# ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/adminmart.com.ldif<br> Enter LDAP Password:<br> adding new entry "dc=adminmart,dc=com"<br> adding new entry "ou=People, dc=adminmart,dc=com"<br> [root@ldap ~]#<br></code><br><br><b>Add the Users</b><br><br><code> [root@ldap ~]# ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/root.ldif<br> Enter LDAP Password:<br> adding new entry "uid=root,ou=People,dc=adminmart,dc=com"<br> adding new entry "uid=operator,ou=People,dc=adminmart,dc=com"<br> [root@ldap ~]#<br> <br> [root@ldap ~]# ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/test1.ldif<br> Enter LDAP Password:<br> adding new entry "uidApply Changes =test1,ou=People,dc=adminmart,dc=com"<br> [root@ldap ~]#<br> <br> [root@ldap ~]# ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/test2.ldif<br> Enter LDAP Password:<br> adding new entry "uid=test2,ou=People,dc=adminmart,dc=com"<br> [root@service ldap ~]#<br></code><br><b>Note:</b> Repeat the same for the rest of users<br>restart

<br><code> [root@ldap ~]# ldapsearch -x -b 'dc=adminmart,dc=com' '(objectclass=*)'</code> <br><br><br><h3>== LDAP Client Configuration</h3>==<code> [root@ldapclient ~]# authconfig </code><br><b> :: [*] Use LDAP [*] Use LDAP Authentication </b><br> <br> [(Both should be checked]<br>) <br><b> :: [ ] Use TLS <br> :: Server: ldap.adminmart.com<br> :: Base DN: dc=adminmart,dc=com<br></b><br><br>