Updated on 16 Mar 2004

openldap-1.2.9-6 (LDAP)

Lightweight Directory Access Protocol

Installation

Install

# rpm -ihv openldap-1.2.9-6.i386.rpm openldap-devel-1.2.9-6.i386.rpm

Create configuration file for SLAPD

Edit /etc/openldap/slapd.conf

If your domain is "hoge.bt", use:

...
database ldbm
suffix  "dc=hoge, dc=bt"
rootdn  "cn=Manager, dc=hoge, dc=bt"
rootpw secret
...

Start SLAPD

# chkconfig --add ldap
# chkconfig ldap on
# /etc/rc.d/init.d/ldap start

Create ldif file

You use ldapadd to add entries an LDAP directory. LDAP add expects input in LDIF format. Hence, adding entries is done in two steps:

create LDIF file
run ldapadd

User

dn: cn=Luke Howard,ou=people,dc=padl,dc=com
cn: Luke Howard
objectclass: top
objectclass: person
objectclass: account
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: posixAccount
mail: lukeh@padl.com
roomnumber:
homephone:
givenname: Luke
sn: Howard
uid: lukeh
userpassword: {crypt}*
loginshell: /bin/csh
uidnumber: 416
gidnumber: 10
homedirectory: /home/lukeh

Mail alias

dn: cn=Postmaster,ou=mailGroups,dc=padl,dc=com
cn: Postmaster
objectclass: rfc822MailGroup
owner: cn=manager,ou=people,dc=padl,dc=com
mail: lukeh
mail: root

Mount (as in /etc/fstab)

dn: cn=fileserver:/exports/home,ou=mounts,dc=padl,dc=com
cn: fileserver:/exports/home
objectclass: mount
mountDirectory: /home
mountType: nfs
mountDumpFrequency: 0
mountPassNumber: 0
mountOption: bg 
mountOption: soft
mountOption: timeo=6

Group

dn: cn=staff,ou=groups,dc=padl,dc=com
cn: staff
objectclass: posixGroup
userPassword: {crypt}*
gidnumber: 10
memberuid: root
memberuid: fagen
memberuid: lukeh

Protocol

dn: cn=icmp,ou=tcpIp,dc=padl,dc=com
cn: icmp
objectclass: ipProtocol
ipProtocolNumber: 1
cn: ICMP

RPC

dn: cn=portmapper,ou=tcpIp,dc=padl,dc=com
cn: portmapper
objectclass: oncRPC
oncRPCNumber: 100000
cn: portmap
cn: sunrpc

Service

dn: cn=orasrv,ou=tcpIp,dc=padl,dc=com
cn: orasrv
objectclass: ipService
ipServicePort: 1525
ipServiceProtocol: tcp
cn: oracle

Host

dn: cn=www.padl.com,ou=devices,dc=padl,dc=com
cn: www.padl.com
objectclass: ipHost
objectclass: top
objectclass: device
ipHostNumber: 192.168.1.1

Network

dn: cn=next-default,ou=tcpIp,dc=padl,dc=com
cn: next-default
objectclass: ipNetwork
ipNetworkNumber: 168.192.1
ipNetmaskNumber: 255.255.255.0
cn: NeXTether
cn: ethernetcn: localnet

Run ldapadd

Run ldapadd to insert these entries into your directory. For example, for "mydomain.com", use:

ldapadd -D -x "cn=Manager, dc=mydomain, dc=com" -W < myldif.ldif

Use ldapsearch

Use ldapsearch to see if slapd is running properly and your added entries exist by running the following command:

ldapsearch -L -b "dc=mydomain, dc=com" -W "(objectclass=*)"

Back