本文共 1884 字，大约阅读时间需要 6 分钟。

CentOS 7 ?? OpenLDAP ? BDB

????

• ?????CentOS 7 x86_64 1511
• ??? IP?172.18.12.203

????

• OpenLDAP?2.4.44
• BDB?5.1.29

1. selinux

?? selinux?

sudo yum install selinux
sudo setenforce

2. TCP 389 ? 636

# ?? TCP 389 ? 636 ??
sudo firewall-cmd --permanent --add-service=ldap
sudo firewall-cmd --permanent --add-service=nslcd
sudo firewall-cmd --permanent --add-socket=udp:389
sudo firewall-cmd --permanent --add-socket=tcp:389
sudo firewall-cmd --permanent --add-socket=tcp:636
sudo firewall-cmd --permanent --add-socket=tcp:1635
sudo firewall-cmd --reload

3. ?? Berkeley DB

# ????? BDB 5.1.29
sudo yum install -y libtool-ltdl-devel
tar -zxvf db-5.1.29.tar.gz
cd db-5.1.29/build_unix
../dist/configure --prefix=/usr/local/berkeleydb-5.1.29
make
make install

4. ?? OpenLDAP

# ?? OpenLDAP 2.4.44
sudo yum install -y openldap openldap-servers
sudo cp /usr/local/berkeleydb-5.1.29/lib/* /etc/ld.so.conf
sudo ldconfig -v
# ?? slapd.conf
vim /usr/local/openldap-2.4.44/etc/openldap/slapd.conf

5. ?????

# ?? DB_CONFIG ??
cp DB_CONFIG.example DB_CONFIG
vim /usr/local/openldap-2.4.44/var/openldap-data/DB_CONFIG

6. ?? OpenLDAP

# ?? slapd ??
sudo systemctl start slapd
sudo systemctl enable slapd
# ?? slapd ??
sudo systemctl status slapd

7. ?? ldapsearch ??

ldapsearch -x -b '' -s base '(objectclass=*)'
ldapsearch -x -b '' -s base namingContexts

8. ?? ldapadmin

sudo yum install -y ldapadmin

9. OpenLDAP ??

??? DN

slappasswd -D "cn=admin,dc=sys,dc=com" -W

??????

vim test.ldif
ldapadd -x -D "cn=admin,dc=sys,dc=com" -W -f test.ldif

????

ldapsearch -x -b 'dc=sys,dc=com' '(objectclass=*)'

?? IT ??

vim test2.ldif
ldapadd -x -D "cn=admin,dc=sys,dc=com" -W -f test2.ldif

???? IT ??

ldapsearch -x -b 'dc=sys,dc=com' '(objectclass=*)'

10. ?? ldapadmin ??

ldapadmin -u "cn=admin,dc=sys,dc=com" -H 172.18.12.203:389

????

转载地址：http://ndpfk.baihongyu.com/