Ldap部署
安装ldap
yum -y install openldap compat-openldap openldap-clients openldap-servers openldap-servers-sql openldap-devel migrationtools
配置ladp
1.1. 生成密码
slappasswd -s admin@123
{SSHA}kOiIH5ZdFVfH5GD7DU9wTLrLBoyP+eL8
1.2. 修改域、管理员信息
vim /etc/openldap/slapd.d/cn\=config/olcDatabase\=\{2\}hdb.ldif
内容如下：
olcSuffix: dc=dfcv,dc=com #修改dc名称
olcRootDN: cn=admin,dc=dfcv,dc=com #修改cn名称、dc名称
olcRootPW: {SSHA}kOiIH5ZdFVfH5GD7DU9wTLrLBoyP+eL8 #该行为新增行，指定管理员密码，该行为新增行(新增加一行)
1.3. 修改监控文件信息
vim /etc/openldap/slapd.d/cn\=config/olcDatabase={1}monitor.ldif
olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=extern
al,cn=auth" read by dn.base="cn=admin,dc=dfcv,dc=com" read by * none
cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG
1.4. 修改权限
修改ldap数据库配置目录归属用户
chown ldap:ldap -R /var/lib/ldap
修改ldap数据库配置目录权限
chmod 700 -R /var/lib/ldap
启动服务
systemctl start slapd
systemctl enable slapd
systemctl status slapd
1.5. 导入schema
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/collective.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/corba.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/cosine.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/duaconf.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/dyngroup.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/inetorgperson.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/java.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/misc.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/nis.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/openldap.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/pmi.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/ppolicy.ldif
1.6. 修改migrate_common.ph
vim /usr/share/migrationtools/migrate_common.ph
内容如下：
# Default DNS domain
$DEFAULT_MAIL_DOMAIN = "dfcv.com";
# Default base
$DEFAULT_BASE = "dc=dfcv,dc=com";
$EXTENDED_SCHEMA = 1;
#创建基础目录
cd /etc/openldap/
# cat 2.ldif
dn: dc=dfcv,dc=com
o: ldap
objectclass: dcObject
objectclass: organization
dc:dfcv
#创建目录结构
ldapadd -x -D "cn=admin,dc=dfcv,dc=com" -W -f 2.ldif
输入admin 密码：admin@123
Enter LDAP Password:
adding new entry "dc=dfcv,dc=com"
#创建部门员工
# cat 5.ldif
dn: ou=People,dc=dfcv,dc=com
ou: People
objectClass: organizationalUnit
dn: cn=test,ou=People,dc=dfcv,dc=com
ou: People
cn: test
sn: People
objectClass: inetOrgPerson
objectClass: organizationalPerson
#创建员工
# ldapadd -x -D "cn=admin,dc=dfcv,dc=com" -W -f 5.ldif
Enter LDAP Password:
adding new entry "ou=People,dc=dfcv,dc=cn"
adding new entry "cn=test,ou=People,dc=dfcv,dc=cn"
