RHEL7中OpenLDAP的安装与配置

ewqw

一、LDAP的术语

    entry：一个单独的单元，使用DN(distinguish name)区别

    attribute:entry的属性，比如，如果entry是组织机构的话，那么它的属性包括地址，电话，传真号码等，属性分为可选和必选，必选的属性使用objectclass定义，这些属性可以在/etc/openldap/slapd.d/cn=config/cn=schema/目录下面找到

    LDIF: LDAP interchange format 是用来表示LDAP entry的文本格式，格式如下：

[id] dn: distinguished_nameattribute_type: attribute_value…attribute_type: attribute_value…

   


二、安装OpenLDAPsuite


    OpenLDAP相关的安装包：

   
PackageDescription
openldapA
openldap-clients
openldap-servers
compat-openldap

    如果需要允许用户本地查询LDAP服务，则需要安装以下额外的包：

    nss-pam-ldapd

        

    安装OpenLDAP包：
   
[iyunv@clz ~]# yum install openldap\* -y

   

    OpenLDAP server安装的工具：

   
CommandDescription
slapacl  Allows you to check the access to a list of attributes.
slapadd  Allows you to add entries from an LDIF file to an LDAP directory.
slapauth Allows you to check a list of IDs for authentication and authorization permissions.
slapcat  Allows you to pull entries from an LDAP directory in the default format and save them in an LDIF file.
slapdn   Allows you to check a list of Distinguished Names (DNs) based on available schema syntax.
slapindex Allows you to re-index the slapd directory based on the current content. Run this utility whenever you change indexing options in the configuration file.
slappasswd  Allows you to create an encrypted user password to be used with the ldapmodify utility, or in the slapd configuration file.
slapschema  Allows you to check the compliance of a database with the corresponding schema.
slaptest    Allows you to check the LDAP server configuration.

   

        在使用slapadd之前，修改以下文件的属主属组：
   
    [iyunv@clz ~]# chown -R ldap.ldap /var/lib/ldap/