OpenLDAP Server
•Install and Configure
MS21900754 Ayola Jayamaha
Agenda
• What is Open LDAP
• Install Open LDAP Server on fedora
• Configure OpenLDAP Sever
• Configure OpenLDAP Database
• Import basic schemas
• Create User Accounts
• Allow service through firewall
• Q&A
What is Open LDAP
•LDAP (Lightweight Directory Access Protocol) is an open and cross platform protocol used for directory
services authentication.
•LDAP provides the communication language that applications use to communicate with other directory
services servers.
•Open Source
1.Update and upgrade your system packages
• $dnf update
• $dnf upgrade
2. Install LDAP server
• dnf install openldap-clients openldap-servers
3. Start and enable OpenLDAP server service to run system reboot.
• systemctl enable slapd
• systemctl start slapd
4. Configure OpenLDAP server
Set the OpenLDAP administrator password.
• slappasswd
• New password: password
• Re-enter new password: password
• Copy the encrypted password
5. Configure OpenLDAP database
• cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG
6. Set the ownership of the LDAP database configuration directory ldap user.
• chown -R ldap:ldap /var/lib/ldap
7. Import OpenLDAP basic schemas
• cd /etc/openldap/schema
• for schema in cosine.ldif nis.ldif inetorgperson.ldif; do ldapadd -Y EXTERNAL -H ldapi:/// -f
$schema; done
Cont..
• ldapmodify -Y EXTERNAL -H ldapi:/// -f mod_domain.ldif
cont..
• vi basedn.ldif
dn: dc=example,dc=com
objectClass: top
objectClass: dcObject
objectclass: organization
o: Example Com
dc: Example
dn: cn=Manager,dc=example,dc=com
objectClass: organizationalRole
cn: Manager
description: LDAP Directory Manager
dn: ou=People,dc=example,dc=com
objectClass: organizationalUnit
ou: People
dn: ou=Group,dc=example,dc=com
objectClass: organizationalUnit
ou: Group
8. Create OpenLDAP server User Accounts
• slappasswd
• New password: password
• Re-enter new password: password
9. Verify that the user is created
• ldapsearch -x uid=amosm -b dc=example,dc=com -LLL
10. Open the OpenLDAP server service on firewall to allow external access.
• firewall-cmd --permanent --add-service=ldapfirewall-cmd --reload
Questions?
Thank you