Difference between revisions of "Openldap: Instalasi"
Jump to navigation
Jump to search
Onnowpurbo (talk | contribs) |
Onnowpurbo (talk | contribs) |
||
| Line 6: | Line 6: | ||
apt-get install libconvert-asn1-perl libnet-ldap-perl | apt-get install libconvert-asn1-perl libnet-ldap-perl | ||
| + | |||
| + | Tambahkan beberapa schema | ||
| + | |||
| + | sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif | ||
| + | sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif | ||
| + | sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif | ||
| + | |||
| + | Edit backend.example.com.ldif | ||
| + | |||
| + | vi /etc/ldap/backend.example.com.ldif | ||
| + | |||
| + | # Load dynamic backend modules | ||
| + | dn: cn=module,cn=config | ||
| + | objectClass: olcModuleList | ||
| + | cn: module | ||
| + | olcModulepath: /usr/lib/ldap | ||
| + | olcModuleload: back_hdb | ||
| + | |||
| + | # Database settings | ||
| + | dn: olcDatabase=hdb,cn=config | ||
| + | objectClass: olcDatabaseConfig | ||
| + | objectClass: olcHdbConfig | ||
| + | olcDatabase: {1}hdb | ||
| + | olcSuffix: dc=example,dc=com | ||
| + | olcDbDirectory: /var/lib/ldap | ||
| + | olcRootDN: cn=admin,dc=example,dc=com | ||
| + | olcRootPW: secret | ||
| + | olcDbConfig: set_cachesize 0 2097152 0 | ||
| + | olcDbConfig: set_lk_max_objects 1500 | ||
| + | olcDbConfig: set_lk_max_locks 1500 | ||
| + | olcDbConfig: set_lk_max_lockers 1500 | ||
| + | olcDbIndex: objectClass eq | ||
| + | olcLastMod: TRUE | ||
| + | olcDbCheckpoint: 512 30 | ||
| + | olcAccess: to attrs=userPassword by dn="cn=admin,dc=example,dc=com" write by anonymous auth by self write by * none | ||
| + | olcAccess: to attrs=shadowLastChange by self write by * read | ||
| + | olcAccess: to dn.base="" by * read | ||
| + | olcAccess: to * by dn="cn=admin,dc=example,dc=com" write by * read | ||
| + | |||
| + | Ganti olcRootPW sesuai dengan password yang kita inginkan | ||
Revision as of 05:14, 31 May 2011
Instalasi
apt-get install slapd ldap-utils ldapscripts
Instalasi CPAN LDAP untuk Webmin
apt-get install libconvert-asn1-perl libnet-ldap-perl
Tambahkan beberapa schema
sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif
Edit backend.example.com.ldif
vi /etc/ldap/backend.example.com.ldif
# Load dynamic backend modules
dn: cn=module,cn=config
objectClass: olcModuleList
cn: module
olcModulepath: /usr/lib/ldap
olcModuleload: back_hdb
# Database settings
dn: olcDatabase=hdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {1}hdb
olcSuffix: dc=example,dc=com
olcDbDirectory: /var/lib/ldap
olcRootDN: cn=admin,dc=example,dc=com
olcRootPW: secret
olcDbConfig: set_cachesize 0 2097152 0
olcDbConfig: set_lk_max_objects 1500
olcDbConfig: set_lk_max_locks 1500
olcDbConfig: set_lk_max_lockers 1500
olcDbIndex: objectClass eq
olcLastMod: TRUE
olcDbCheckpoint: 512 30
olcAccess: to attrs=userPassword by dn="cn=admin,dc=example,dc=com" write by anonymous auth by self write by * none
olcAccess: to attrs=shadowLastChange by self write by * read
olcAccess: to dn.base="" by * read
olcAccess: to * by dn="cn=admin,dc=example,dc=com" write by * read
Ganti olcRootPW sesuai dengan password yang kita inginkan