26. Linux OpenLDAP Server

Table of Contents

Compile ans Install
Compile and Optimize
Configurations
Configure the /etc/ldap/slapd.conf file
Configure the /etc/rc.d/init.d/ldap script file
Securing OpenLDAP
OpenLDAP Creation and Maintenance Tools
LDMB backend database off-line
Create the LDMB backend database on-line
ldapmodify
OpenLDAP Users Tools
The Netscape Address Book client for LDAP
Installed files

Until now, we have been talking about security and optimization in this book, so why would we talk about OpenLDAP? Well, the OpenLDAP directory server will expand our horizons through its many possibilities. We can use its replication capability to centralize and consolidate different information on one server for all the others in our network. Imagine having the possibility of adding or disabling a Unix or NT account, setting access to a restricted Web server, and adding a mail address or alias, all with a single operation available as an NIS service, with the added security of SSL encryption, and the speed of object-oriented hierarchies. Another interesting use is to create an authoritative list of employees on one or more LDAP servers that can be accessible from your private network, or over the Internet.

Compile ans Install

LDAP

These installation instructions assume

  • Commands are Unix-compatible.

  • The source path is /var/tmp, other paths are possible.

  • Installations were tested on Red Hat Linux 6.1 and 6.2.

  • All steps in the installation will happen in super-user account root.

  • OpenLDAP version number is 1.2.10

The Package(s) required are and available at:
OpenLDAP Homepage:http://www.openldap.org/
OpenLDAP FTP Site: 204.152.186.57
You must be sure to download: openldap-1.2.10.tgz

Before you decompress tarballs, it is a good idea to make a list of files on the system before you install OpenLDAP, and one afterwards, and then compare them using diff to find out what file it placed where. Simply run find /* > OpenLDAP1 before and find /* > OpenLDAP2 after you install the software, and use diff OpenLDAP1 OpenLDAP2 > OpenLDAP-Installed to get a list of what changed.

Compile and decompress the tarball, tar.gz.

                 [root@deep] /# cp openldap-version.tgz /var/tmp
                 [root@deep] /# cd /var/tmp/
                 [root@deep ]/tmp# tar xzpf openldap-version.tgz