Difference between revisions of "Openldap: Instalasi"
Jump to navigation
Jump to search
Onnowpurbo (talk | contribs) |
Onnowpurbo (talk | contribs) |
||
Line 6: | Line 6: | ||
apt-get install libconvert-asn1-perl libnet-ldap-perl | apt-get install libconvert-asn1-perl libnet-ldap-perl | ||
+ | |||
+ | Tambahkan beberapa schema | ||
+ | |||
+ | sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif | ||
+ | sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif | ||
+ | sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif | ||
+ | |||
+ | Edit backend.example.com.ldif | ||
+ | |||
+ | vi /etc/ldap/backend.example.com.ldif | ||
+ | |||
+ | # Load dynamic backend modules | ||
+ | dn: cn=module,cn=config | ||
+ | objectClass: olcModuleList | ||
+ | cn: module | ||
+ | olcModulepath: /usr/lib/ldap | ||
+ | olcModuleload: back_hdb | ||
+ | |||
+ | # Database settings | ||
+ | dn: olcDatabase=hdb,cn=config | ||
+ | objectClass: olcDatabaseConfig | ||
+ | objectClass: olcHdbConfig | ||
+ | olcDatabase: {1}hdb | ||
+ | olcSuffix: dc=example,dc=com | ||
+ | olcDbDirectory: /var/lib/ldap | ||
+ | olcRootDN: cn=admin,dc=example,dc=com | ||
+ | olcRootPW: secret | ||
+ | olcDbConfig: set_cachesize 0 2097152 0 | ||
+ | olcDbConfig: set_lk_max_objects 1500 | ||
+ | olcDbConfig: set_lk_max_locks 1500 | ||
+ | olcDbConfig: set_lk_max_lockers 1500 | ||
+ | olcDbIndex: objectClass eq | ||
+ | olcLastMod: TRUE | ||
+ | olcDbCheckpoint: 512 30 | ||
+ | olcAccess: to attrs=userPassword by dn="cn=admin,dc=example,dc=com" write by anonymous auth by self write by * none | ||
+ | olcAccess: to attrs=shadowLastChange by self write by * read | ||
+ | olcAccess: to dn.base="" by * read | ||
+ | olcAccess: to * by dn="cn=admin,dc=example,dc=com" write by * read | ||
+ | |||
+ | Ganti olcRootPW sesuai dengan password yang kita inginkan |
Revision as of 05:14, 31 May 2011
Instalasi
apt-get install slapd ldap-utils ldapscripts
Instalasi CPAN LDAP untuk Webmin
apt-get install libconvert-asn1-perl libnet-ldap-perl
Tambahkan beberapa schema
sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif
Edit backend.example.com.ldif
vi /etc/ldap/backend.example.com.ldif
# Load dynamic backend modules dn: cn=module,cn=config objectClass: olcModuleList cn: module olcModulepath: /usr/lib/ldap olcModuleload: back_hdb # Database settings dn: olcDatabase=hdb,cn=config objectClass: olcDatabaseConfig objectClass: olcHdbConfig olcDatabase: {1}hdb olcSuffix: dc=example,dc=com olcDbDirectory: /var/lib/ldap olcRootDN: cn=admin,dc=example,dc=com olcRootPW: secret olcDbConfig: set_cachesize 0 2097152 0 olcDbConfig: set_lk_max_objects 1500 olcDbConfig: set_lk_max_locks 1500 olcDbConfig: set_lk_max_lockers 1500 olcDbIndex: objectClass eq olcLastMod: TRUE olcDbCheckpoint: 512 30 olcAccess: to attrs=userPassword by dn="cn=admin,dc=example,dc=com" write by anonymous auth by self write by * none olcAccess: to attrs=shadowLastChange by self write by * read olcAccess: to dn.base="" by * read olcAccess: to * by dn="cn=admin,dc=example,dc=com" write by * read
Ganti olcRootPW sesuai dengan password yang kita inginkan