OpenLDAP

OpenLDAP을 정리 합니다.

• 홈페이지 : http://www.openldap.org/
• 다운로드 :
• 라이선스 :
• 플랫폼 :

CentOS 7에서 OpenLDAP 설치

OpenLDAP에서 SSL 또는 TLS를 지원하기 위해 인증서를 생성 한다.

yum -y install openssl

mkdir /etc/ssl/jopenbusiness
cd /etc/ssl/jopenbusiness
openssl genrsa -des3 -out server.key 2048
openssl req -new -key server.key -out server.csr
cp server.key server.key.org
openssl rsa -in server.key.org -out server.key

//--- server.crt (공개키) 와 server.key (비밀키)

// cd /etc/pki/tls/certs
// openssl req -new -x509 -nodes -out ldapPublic.pem -keyout ldapPrivate.pem -days 365

OpenLDAP 2.4.40을 설치하고 환경을 구성 한다.

​yum -y install openldap openldap-* migrationtools

//--- 비밀번호를 입력하고 나온 SSHA 값을 저장하여 둔다.
[root@home openldap] slappasswd
New password:
Re-enter new password:
{SSHA}tFJ+m8wB36T/HqKOS/c/DMl4JfO5aY1R

cd /etc/openldap/slapd.d/cn=config
vi olcDatabase={2}hdb.ldif
    olcSuffix: dc=jopenbusiness,dc=com
    olcRootDN: cn=Manager,dc=jopenbusiness,dc=com
    olcRootPW: {SSHA}tFJ+m8wB36T/HqKOS/c/DMl4JfO5aY1R
    olcTLSCertificateFile: /etc/ssl/jopenbusiness/server.crt
    olcTLSCertificateKeyFile: /etc/ssl/jopenbusiness/server.key

vi olcDatabase={1}monitor.ldif
    olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=extern
     al,cn=auth" read by dn.base="cn=Manager,dc=jopenbusiness,dc=com" read by * none

slaptest -u
//--- checksum error는 무시 한다.

systemctl start slapd
systemctl enable slapd
netstat -lt | grep ldap

LDAP 데이터를 구성 한다.

cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG
chown -R ldap:ldap /var/lib/ldap/

ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/cosine.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/nis.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/inetorgperson.ldif

생략

참고 문헌

• Directory
• LDAP
• http://www.learnitguide.net/2016/01/configure-openldap-server-on-rhel7.html