13518219792
本篇内容介绍了“openldap-2.4.44的安装方法”的有关知识，在实际案例的操作过程中，不少人都会遇到这样的困境，接下来就让小编带领大家学习一下如何处理这些情况吧！希望大家仔细阅读，能够学有所成！
创新互联公司自2013年创立以来，先为云冈等服务建站，云冈等地企业，进行企业商务咨询服务。为云冈企业网站制作PC+手机+微官网三网同步一站式服务解决您的所有建站问题。
一、安装base-repo
## 根据自己的OS版本安装对应的base repo rpm -Uvh http://mirror.centos.org/centos/7/os/x86_64/Packages/centos-release-7-6.1810.2.el7.centos.x86_64.rpm ls -l /etc/yum.repo/ total 44 -rw-r--r--. 1 root root 1664 Nov 23 2018 CentOS-Base.repo -rw-r--r--. 1 root root 1309 Nov 23 2018 CentOS-CR.repo -rw-r--r--. 1 root root 649 Nov 23 2018 CentOS-Debuginfo.repo -rw-r--r--. 1 root root 314 Nov 23 2018 CentOS-fasttrack.repo -rw-r--r--. 1 root root 630 Nov 23 2018 CentOS-Media.repo -rw-r--r--. 1 root root 1331 Nov 23 2018 CentOS-Sources.repo -rw-r--r--. 1 root root 5701 Nov 23 2018 CentOS-Vault.repo -rw-r--r--. 1 root root 951 Oct 2 2017 epel.repo -rw-r--r--. 1 root root 1050 Oct 2 2017 epel-testing.repo -rw-r--r--. 1 root root 2003 Jul 8 07:44 README yum install epel-release*
二、安装openldap-server/devel/clients
yum install -y openldap-servers openldap-clients openldap-devel rpm -qa|grep openldap* openldap-servers-sql-2.4.44-21.el7_6.x86_64 openldap-2.4.44-21.el7_6.x86_64 openldap-clients-2.4.44-21.el7_6.x86_64 openldap-devel-2.4.44-21.el7_6.x86_64 openldap-servers-2.4.44-21.el7_6.x86_64
三、配置openldap-server
配置slappasswd
slappasswd -s 123456
{SSHA}NRWg5Ig47XVGHZq0eX/ayx8NSCSbiIw8修改basedn
vi /etc/openldap/slapd.d/cn\=config/olcDatabase\=\{2\}hdb.ldif
...
olcSuffix: dc=harry,dc=com
olcRootDN: cn=Manager,dc=harry,dc=com
olcRootPW: {SSHA}NRWg5Ig47XVGHZq0eX/ayx8NSCSbiIw8
...
vi /etc/openldap/slapd.d/cn\=config/olcDatabase\=\{1\}monitor.ldif
...
olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=extern
al,cn=auth" read by dn.base="cn=Manager,dc=harry,dc=com" read by * none
...配置SSL
cd /etc/openldap/certs/ rm -rf /etc/openldap/certs/* openssl genrsa -out cert.key 1024 openssl req -new -key cert.key -out cert.csr openssl x509 -req -days 3650 -in cert.csr -signkey cert.key -out cert.crt vi SLAPD_URLS="ldapi:/// ldap:///" ... olcTLSCACertificatePath: /etc/openldap/certs olcTLSCertificateFile: /etc/openldap/certs/cert.crt olcTLSCertificateKeyFile: /etc/openldap/certs/cert.key ... cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG chown ldap:ldap -R /etc/openldap ### vi /etc/sysconfig/slapd ... SLAPD_URLS="ldapi:/// ldap:/// ldaps:///" ...
启用memberof
vi add_module_group.ldif
...
dn: cn=module,cn=config
cn: module
objectClass: olcModuleList
objectClass: top
olcModuleLoad: memberof.la
olcModulePath: /usr/lib64/openldap
...
vi add_module_group-2.ldif
...
dn: olcOverlay={0}memberof,olcDatabase={2}hdb,cn=config
objectClass: olcConfig
objectClass: olcMemberOf
objectClass: olcOverlayConfig
objectClass: top
olcOverlay: memberof
olcMemberOfDangling: ignore
olcMemberOfRefInt: TRUE
olcMemberOfGroupOC: groupOfUniqueNames
olcMemberOfMemberAD: uniqueMember
olcMemberOfMemberOfAD: memberOf
...
vi add-refin1.ldif
...
dn: cn=module{0},cn=config
add: olcmoduleload
olcmoduleload: refint
...
vi add-refin2.ldif
...
dn: olcOverlay=refint,olcDatabase={2}hdb,cn=config
objectClass: olcConfig
objectClass: olcOverlayConfig
objectClass: olcRefintConfig
objectClass: top
olcOverlay: refint
olcRefintAttribute: memberof uniqueMember manager owner
...检测配置并启动
slaptest -u service slapd restart netstat -tunpl | grep 389 netstat -tunpl | grep 636
四、安装phpldapadmin
yum install phpldapadmin*
配置phpldapadmin
