LDAP 在ubuntu14.04下的安装配置install and configure

 

https://help.ubuntu.com/lts/serverguide/openldap-server.html

if error occurs in reinstall, try this:

"1)sudo apt-get purge slapd

2)sudo apt-get install slapd ldap-utils

"

 

you can configure ldap after install:

When the installation is complete, we actually need to reconfigure the LDAP package. Type the following to bring up the package configuration tool:

 

sudo dpkg-reconfigure slapd

 

You will be asked a series of questions about how you'd like to configure the software.

 

Omit OpenLDAP server configuration? No

 

DNS domain name?

 

This will create the base structure of your directory path. Read the message to understand how it works.

There are no set rules for how to configure this. If you have an actual domain name on this server, you can use that. Otherwise, use whatever you'd like.

In this article, we will call it test.com 

Organization name?

 

Again, this is up to you

We will use example in this guide. 

Administrator password?

 

Use the password you configured during installation, or choose another one 

Database backend to use? HDB

 

Remove the database when slapd is purged? No

 

Move old database? Yes

 

Allow LDAPv2 protocol? No

 

https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-a-basic-ldap-server-on-an-ubuntu-12-04-vps

 

The ldap-utils package comes with enough utilities to manage the directory but the long string of options needed can make them a burden to use. The ldapscripts package contains wrapper scripts to these utilities that some people find easier to use.

 

Install the package:

 

sudo apt-get install ldapscripts

#################################################

then add two nodes ou=Groups and ou=Users to the LDAP, before add a group to LDAP

 

 

a stupid bug:

if the passwd contain some special character like"@",","....anything like that, then you will get error when add group use 'sudo ldapaddgroup test',like: 

error adding group to ldap

so,give it a simple 'secret' passwd, like 'dog','monkey',,,,

############################################################################################## step by step :

first:

1)sudo apt-get purge slapd

2)sudo apt-get install slapd ldap-utils

do like above each some stupid error occurs that you can't solve.

second:

sudo dpkg-reconfigure lapd #configure according to the link2 above, you'd better don't configure it by hand.

third:

sudo apt-get install ldapscripts #install a convenient tools

and then, configure ldapscripts's configure file /etc/ldapscripts/ldapscripts.conf, add sentences, like:

SERVER=localhost

BINDDN='cn=admin,dc=example,dc=com'

BINDPWDFILE='/etc/ldapscripts/ldapscripts.passwd'

SUFFIX='dc=example,dc=com'

GSUFFIX='ou=Groups'

USUFFIX='ou=Users'

fourth:

add passwd to ldapscripts.passwd file :

sudo sh -c "echo -n 'monkey' > /etc/ldapscripts/ldapscripts.passwd"

 

then: you can operate LDAP using ldapscripts commands according to link 1.

warning: ldapscript will always return 'error adding group qa to LDAP',if the group already exists

http://www.meso.northwestern.edu/intranet/recipies/useful-computer-files-and-programs/configuring-group-linux-servers-and-terminals-with-ldap-kerberos-and-nfs/ldap-user-and-group-management

start LDAP server:  /etc/init.d/lsapd