Debian: Set Up OpenLDAP Server: Difference between revisions
Created page with "'''OpenLDAP''' is an open-source and fast '''directory server''' that provides network clients with directory services. Client applications connect to OpenLDAP server using the '''Lightweight Directory Access Protocol (LDAP)''' to access organizational information stored on that server. Given the appropriate access, clients can search the directory, modify and manipulate records in the directory. OpenLDAP is efficient in both reading and modifying data in the directory...." |
No edit summary |
||
| (One intermediate revision by the same user not shown) | |||
| Line 58: | Line 58: | ||
== Step 3: Configuring the LDAP Clients == | == Step 3: Configuring the LDAP Clients == | ||
<code>/etc/ldap/ldap.conf</code> is the configuration file for all OpenLDAP clients. Open this file. | <code>/etc/ldap/ldap.conf</code> is the configuration file for all OpenLDAP clients. Open this file.<syntaxhighlight lang="bash"> | ||
sudo nano /etc/ldap/ldap.conf | |||
We need to specify two parameters: the '''base DN''' and the '''URI''' of our OpenLDAP server. Copy and paste the following text at the end of the file. Replace <code>your-domain</code> and <code>com</code> as appropriate. | </syntaxhighlight>We need to specify two parameters: the '''base DN''' and the '''URI''' of our OpenLDAP server. Copy and paste the following text at the end of the file. Replace <code>your-domain</code> and <code>com</code> as appropriate.<syntaxhighlight lang="bash"> | ||
BASE dc=your-domain,dc=com | |||
URI ldap://localhost | |||
The first line defines the base DN. It tells the client programs where to start their search in the directory. If you used a subdomain when configuring OpenLDAP server, then you need to add the subdomain here like so | </syntaxhighlight>The first line defines the base DN. It tells the client programs where to start their search in the directory. If you used a subdomain when configuring OpenLDAP server, then you need to add the subdomain here like so<syntaxhighlight lang="bash"> | ||
BASE dc=subdomain,dc=your-domain,dc=com | |||
The second line defines the URI of our OpenLDAP server. Since the LDAP server and client are on the same machine, we should set the URI to <code>ldap://localhost</code>. You can add multiple URIs later if the need arises. | </syntaxhighlight>The second line defines the URI of our OpenLDAP server. Since the LDAP server and client are on the same machine, we should set the URI to <code>ldap://localhost</code>. You can add multiple URIs later if the need arises. | ||
Save and close the file. | Save and close the file. | ||
| Line 72: | Line 72: | ||
Now that OpenLDAP server is running and client configuration is done, run the following command to make test connections to the server. | Now that OpenLDAP server is running and client configuration is done, run the following command to make test connections to the server. | ||
ldapsearch -x | ldapsearch -x | ||
Output: | Output:<syntaxhighlight lang="bash"> | ||
# extended LDIF | |||
# | |||
# LDAPv3 | |||
# base <dc=linuxbabe,dc=com> (default) with scope subtree | |||
# filter: (objectclass=*) | |||
# requesting: ALL | |||
# | |||
# linuxbabe.com | |||
dn: dc=linuxbabe,dc=com | |||
objectClass: top | |||
objectClass: dcObject | |||
objectClass: organization | |||
o: LinuxBabe | |||
dc: linuxbabe | |||
# admin, linuxbabe.com | |||
dn: cn=admin,dc=linuxbabe,dc=com | |||
objectClass: simpleSecurityObject | |||
objectClass: organizationalRole | |||
cn: admin | |||
description: LDAP administrator | |||
# search result | |||
search: 2 | |||
result: 0 Success | |||
# numResponses: 3 | |||
# numEntries: 2 | |||
''' | </syntaxhighlight>'''sult: 0 Success''' indicates that OpenLDAP server is working. If you get the following line, then it’s not working. | ||
result: 32 No such object | result: 32 No such object | ||
| Line 233: | Line 233: | ||
== Source == | == Source == | ||
* [https://www.linuxbabe.com/debian/set-up-openldap-server-debian linuxbabe.com] | * [https://www.linuxbabe.com/debian/set-up-openldap-server-debian linuxbabe.com] [https://web.archive.org/web/20240509135259/http://web.archive.org/screenshot/https://www.linuxbabe.com/debian/set-up-openldap-server-debian archived] | ||
[[Category:Linux]] | [[Category:Linux]] | ||
[[Category:Debian]] | [[Category:Debian]] | ||
[[Category:Ubuntu]] | [[Category:Ubuntu]] | ||