OpenLDAP安装配置文档.docVIP

OpenLDAP安装配置文档 配置OpenLDAP服务器 关闭防火墙或清空防火墙规则 安装 查看系统中已安装的LDAP相关的包 # rpm -qa | grep ldap openldap-2.3.43-12.el5_5.3 nss_ldap-253-37.el5 nss_ldap-253-37.el5 openldap-2.3.43-12.el5_5.3 安装 # yum -y install openldap-devel openldap-servers openldap-clients nss_ldap 如果需要用ldap做一些高级应用，还需要加装如下套件：???? auth_ldap* ： ldap for apache组件（用于web登陆ldap认证）???? nss_ldap*??? ldap for nss and pam 组件 （用于linux登陆ldap认证）???? php_ldap*? （用于php 作为ldap client与ldap server连接的API接口） 配置 安装完成一中的各个软件包后，系统中存在两个ldap的相关配置文件，分别是/etc/ldap.conf、/etc/openldap/ldap.conf和/etc/openldap/slapd.conf /etc/openldap/ldap.conf 和/etc/openldap/slapd.conf是设置ldap服务器ldap.conf是设置ldap客户机 修改/etc/openldap/slapd.conf 目标使/etc/openldap/slapd.conf信息如下所示 include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/corba.schema include /etc/openldap/schema/dyngroup.schema include /etc/openldap/schema/java.schema include /etc/openldap/schema/misc.schema include /etc/openldap/schema/openldap.schema include /etc/openldap/schema/ppolicy.schema allow bind_v2 pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args database bdb suffix dc=ldaptest,dc=com suffix就是BaseDN rootdn dc=ldaptest,dc=com rootpw directory /var/lib/ldap index objectClass eq,pres index ou,cn,mail,surname,givenname eq,pres,sub index uidNumber,gidNumber,loginShell eq,pres index uid,memberUid eq,pres,sub index nisMapName,nisMapEntry eq,pres,sub 修改hostname Hostname的命名要对应BaseDN # cat /etc/hosts # Do not remove the following line, or various programs # that require network functionality will fail. localhost ::1 localhost6.localdomain6 localhost6 # cat /etc/sysconfig/network NETWORKING=yes NETWORK