Changes

<h3>Step by Step Installation and Configuration OpenLDAP Server</h3><b>By Ganesh (ganesh35@gmail.com)</b>

='''Note:''' Use your domain name and IP instead of adminmart == Create container with OpenLDAP ===

<h3>== Configuration of OpenLDAP Server</h3>==<b>Easy steps for adding users:</b>1. # Create unix user<br>2. # Create unix user's ldap passwd file<br>3. # Convert passwd.file to ldif file<br>4. # Add ldap file to LDAP Directory using ldapadd<br><h4>Step #1. === Requirements</h4>=== compat-openldap.i386 0:2.1.30-6.4E<br> openldap-clients.i386 0:2.2.13-6.4E<br> openldap-devel.i386 0:2.2.13-6.4E<br> openldap-servers.i386 0:2.2.13-6.4E<br> openldap-servers-sql.i386 0:2.2.13-6.4E<br><br><br>You can install them using the command:<br><br> yum install *openldap* -y <br>

<h4>Step #2. === Start the service</h4>===<code> [root@ldap ~]# chkconfig --levels 235 ldap on<br>

</code><h4>Step #3. === Create LDAP root user password</h4>===<code> [root@ldap ~]# slappasswd<br> New password:<br> Re-enter new password:<br> {SSHA}cWB1VzxDXZLf6F4pwvyNvApBQ8G/DltW<br>

<h4>Step === Update /etc/openldap/slapd.conf for the root password ===  [root@ldap ~]#5vi /etc/openldap/slapd. conf #68 database bdb #69 suffix "dc=adminmart,dc=com" #70 rootdn "cn=Manager,dc=adminmart,dc=com" #71 rootpw {SSHA}cWB1VzxDXZLf6F4pwvyNvApBQ8G/DltW === Apply Changes</h4>===<code>

<h4>Step #6. === Create test users</h4><code> [root@ldap ~]# useradd test1<br> [root@ldap ~]# passwd test1<br> Changing password for user test1.<br> New UNIX password:<br> Retype new UNIX password:<br> passwd: all authentication tokens updated successfully.<br> [root@ldap ~]# useradd test2<br> [root@ldap ~]# passwd test2<br> Changing password for user test2.<br> New UNIX password:<br> Retype new UNIX password:<br> passwd: all authentication tokens updated successfully.<br> [root@ldap ~]#<br> </code><br><b>Note:</b> Repeat the same for the rest of users <br>===

<h4>Step [root@ldap ~]#7. Migrate local users to LDAP</h4><code>useradd test1 [root@ldap ~]# grep root /etc/passwd > /etc/openldap/test1 Changing password for user test1. New UNIX password: Retype new UNIX password: passwd: all authentication tokens updated successfully.root<br> [root@ldap ~]# grep test1 /etc/passwd > /etc/openldap/passwd.test1<br>useradd test2 [root@ldap ~]# grep passwd test2 Changing password for user test2 /etc/passwd > /etc/openldap/passwd.test2<br></code><br> New UNIX password:<b>Note Retype new UNIX password:</b> Repeat the same for the rest of users<br> passwd: all authentication tokens updated successfully. [root@ldap ~]#

<h4>Step #8'''Note:''' Repeat the same for the rest of users. Update default settings on file /usr/share/openldap/migration/migrate_common.ph</h4> #71 $DEFAULT_MAIL_DOMAIN = "adminmart.com";<br> #74 $DEFAULT_BASE = "dc=adminmart,dc=com";<br>

<h4>Step #9. Convert passwd.file === Migrate local users to ldif (LDAP Data Interchange Format) file </h4><code> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.root /etc/openldap/root.ldif<br> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test1 /etc/openldap/test1.ldif<br> [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test2 /etc/openldap/test2.ldif<br></code><br><b>Note:</b> Repeat the same for the rest of users<br>===

<h4>Step #10. Update root.ldif file for the "Manager" of LDAP Server </h4><code> [root@ldap ~]# vi grep root /etc/passwd > /etc/openldap/rootpasswd.ldif<br> #1 dn: uid=root,ou=People,dc=adminmart,dc=com<br> #2 uid: [root<br> @ldap ~]#3 cn: Manager<br> #4 objectClass: account<br><grep test1 /etc/codepasswd ><h4>Step #11. Create a domain ldif file (/etc/openldap/adminmart.compasswd.ldif)</h4><code>test1 [root@ldap ~]# cat grep test2 /etc/openldap/adminmart.com.ldif<br> dn: dc=adminmart,dc=com<br> dc: adminmart<br> description: LDAP Admin<br> objectClass: dcObject<br> objectClass: organizationalUnit<brpasswd > ou: rootobject<br> <br> dn: ou=People, dc=adminmart,dc=com<br> ou: People<br> description: Users of adminmart<br> objectClass: organizationalUnit<br></code> <h4>Step #12. Import all users in to the LDAP<etc/h4><b>Add the Domain ldif file <openldap/b><br><br><code>passwd.test2

[root@ldap ~]# ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/adminmart.com.ldif<br> Enter LDAP Password:<br> adding new entry "dc=adminmart,dc=com"<br> adding new entry "ou=People, dc=adminmart,dc=com"<br> [root@ldap ~]#<br></code><br><br><b>Add the Users</b><br><br><code> [root@ldap ~]# ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/root.ldif<br> Enter LDAP Password:<br> adding new entry "uid=root,ou=People,dc=adminmart,dc=com"<br> adding new entry "uid=operator,ou=People,dc=adminmart,dc=com"<br> [root@ldap ~]#<br> <br> [root@ldap ~]# ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/test1.ldif<br> Enter LDAP Password:<br> adding new entry "uid=test1,ou=People,dc=adminmart,dc=com"<br> [root@ldap ~]#<br> <br> [root@ldap ~]# ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/test2.ldif<br> Enter LDAP Password:<br> adding new entry "uid=test2,ou=People,dc=adminmart,dc=com"<br> [root@ldap ~]#<br></code><br><b>'''Note:</b> ''' Repeat the same for the rest of users<br>.

<h4>Step === Update default settings on file /usr/share/openldap/migration/migrate_common.ph ===  #71 $DEFAULT_MAIL_DOMAIN = "adminmart.com"; #74 $DEFAULT_BASE = "dc=adminmart,dc=com"; === Convert passwd.file to ldif (LDAP Data Interchange Format) file ===  [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.root /etc/openldap/root.ldif [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test1 /etc/openldap/test1.ldif [root@ldap ~]# /usr/share/openldap/migration/migrate_passwd.pl /etc/openldap/passwd.test2 /etc/openldap/test2.ldif '''Note:''' Repeat the same for the rest of users. === Update root.ldif file for the "Manager" of LDAP Server ===  [root@ldap ~]# vi /etc/openldap/root.ldif #1 dn: uid=root,ou=People,dc=adminmart,dc=com #2 uid: root #3 cn: Manager #4 objectClass: account === Create a domain ldif file (/etc/openldap/adminmart.com.ldif) ===  [root@ldap ~]# cat /etc/openldap/adminmart.com.ldif dn: dc=adminmart,dc=com dc: adminmart description: LDAP Admin objectClass: dcObject objectClass: organizationalUnit ou: rootobject  dn: ou=People, dc=adminmart,dc=com ou: People description: Users of adminmart objectClass: organizationalUnit === Import all users in to the LDAP === Add the Domain ldif file:  [root@ldap ~]# ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/adminmart.com.ldif Enter LDAP Password: adding new entry "dc=adminmart,dc=com" adding new entry "ou=People, dc=adminmart,dc=com" [root@ldap ~]# Add the Users:  [root@ldap ~]# ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/root.ldif Enter LDAP Password: adding new entry "uid=root,ou=People,dc=adminmart,dc=com" adding new entry "uid=operator,ou=People,dc=adminmart,dc=com" [root@ldap ~]#  [root@ldap ~]# ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/test1.ldif Enter LDAP Password: adding new entry "uid=test1,ou=People,dc=adminmart,dc=com" [root@ldap ~]#13  [root@ldap ~]# ldapadd -x -D "cn=Manager,dc=adminmart,dc=com" -W -f /etc/openldap/test2. ldif Enter LDAP Password: adding new entry "uid=test2,ou=People,dc=adminmart,dc=com" [root@ldap ~]# '''Note:''' Repeat the same for the rest of users. === Apply Changes </h4>===<code> [root@ldap ~]# service ldap restart</code> <br> === Test LDAP Server ===

<br><code> [root@ldap ~]# ldapsearch -x -b 'dc=adminmart,dc=com' '(objectclass=*)'</code> <br><br><br><h3>== LDAP Client Configuration</h3>==<code> [root@ldapclient ~]# authconfig </code><br><b> :: [*] Use LDAP [*] Use LDAP Authentication </b><br> <br> [Both should be checked]<br> <br><b> :: [ ] Use TLS <br> :: Server: ldap.adminmart.com<br> :: Base DN: dc=adminmart,dc=com<br></b><br><br>