Difference between revisions of "Openldap: Instalasi"

From OnnoWiki
Jump to navigation Jump to search
Line 6: Line 6:
  
 
  apt-get install libconvert-asn1-perl libnet-ldap-perl
 
  apt-get install libconvert-asn1-perl libnet-ldap-perl
 +
 +
Tambahkan beberapa schema
 +
 +
sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif
 +
sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif
 +
sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif
 +
 +
Edit backend.example.com.ldif
 +
 +
vi /etc/ldap/backend.example.com.ldif
 +
 +
# Load dynamic backend modules
 +
dn: cn=module,cn=config
 +
objectClass: olcModuleList
 +
cn: module
 +
olcModulepath: /usr/lib/ldap
 +
olcModuleload: back_hdb
 +
 +
# Database settings
 +
dn: olcDatabase=hdb,cn=config
 +
objectClass: olcDatabaseConfig
 +
objectClass: olcHdbConfig
 +
olcDatabase: {1}hdb
 +
olcSuffix: dc=example,dc=com
 +
olcDbDirectory: /var/lib/ldap
 +
olcRootDN: cn=admin,dc=example,dc=com
 +
olcRootPW: secret
 +
olcDbConfig: set_cachesize 0 2097152 0
 +
olcDbConfig: set_lk_max_objects 1500
 +
olcDbConfig: set_lk_max_locks 1500
 +
olcDbConfig: set_lk_max_lockers 1500
 +
olcDbIndex: objectClass eq
 +
olcLastMod: TRUE
 +
olcDbCheckpoint: 512 30
 +
olcAccess: to attrs=userPassword by dn="cn=admin,dc=example,dc=com" write by anonymous auth by self write by * none
 +
olcAccess: to attrs=shadowLastChange by self write by * read
 +
olcAccess: to dn.base="" by * read
 +
olcAccess: to * by dn="cn=admin,dc=example,dc=com" write by * read
 +
 +
Ganti olcRootPW sesuai dengan password yang kita inginkan

Revision as of 05:14, 31 May 2011

Instalasi

apt-get install slapd ldap-utils ldapscripts

Instalasi CPAN LDAP untuk Webmin

apt-get install libconvert-asn1-perl libnet-ldap-perl

Tambahkan beberapa schema

sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif
sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif
sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif

Edit backend.example.com.ldif

vi /etc/ldap/backend.example.com.ldif
# Load dynamic backend modules
dn: cn=module,cn=config
objectClass: olcModuleList
cn: module
olcModulepath: /usr/lib/ldap
olcModuleload: back_hdb

# Database settings
dn: olcDatabase=hdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {1}hdb
olcSuffix: dc=example,dc=com
olcDbDirectory: /var/lib/ldap
olcRootDN: cn=admin,dc=example,dc=com
olcRootPW: secret
olcDbConfig: set_cachesize 0 2097152 0
olcDbConfig: set_lk_max_objects 1500
olcDbConfig: set_lk_max_locks 1500
olcDbConfig: set_lk_max_lockers 1500
olcDbIndex: objectClass eq
olcLastMod: TRUE
olcDbCheckpoint: 512 30
olcAccess: to attrs=userPassword by dn="cn=admin,dc=example,dc=com" write by anonymous auth by self write by * none
olcAccess: to attrs=shadowLastChange by self write by * read
olcAccess: to dn.base="" by * read
olcAccess: to * by dn="cn=admin,dc=example,dc=com" write by * read

Ganti olcRootPW sesuai dengan password yang kita inginkan