OpenLDAP

root@ldap:~# apt-get install slapd ldap-utils

Informe e repita a senha do Administrador LDAP.

root@ldap:~# dpkg-reconfigure slapd

Perguntas do dbconf:

– Omitir as Configurações: Não
– Domínio DNS: exemplo.org
– Nome da Empresa: Exemplo
– Senha do Admin: senha123
– Confirme a Senha: senha123
– Método de Armazenamento: HDB

root@ldap:~# ldapsearch -x -LLL -h 127.0.0.1 -b dc=exemplo,dc=org
dn: dc=exemplo,dc=org
objectClass: top
objectClass: dcObject
objectClass: organization
o: Exemplo
dc: exemplo
 
dn: cn=admin,dc=exemplo,dc=org
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator

root@ldap:~# vim /etc/ldap/ldap.conf
[...]
BASE    dc=examplo,dc=org
URI     ldap://ldap.examplo.org
[...]

root@ldap:~# cat ou.ldif
dn: ou=Grupos,dc=exemplo,dc=org
objectClass: organizationalUnit
ou: Grupos
description: Grupos
 
dn: ou=Usuarios,dc=exemplo,dc=org
objectClass: organizationalUnit
ou: Usuarios
description: Usuarios

root@ldap:~# ldapadd -h localhost -p389 -x -D cn=admin,dc=exemplo,dc=org -f ou.ldif -W
Enter LDAP Password: 
adding new entry "ou=Grupos,dc=exemplo,dc=org"
 
adding new entry "ou=Usuarios,dc=exemplo,dc=org"

root@ldap:~# cat user.ldif
dn: uid=gean,ou=Usuarios,dc=exemplo,dc=org
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: top
uid: gean
sn: Gean
cn: Martins
mail: gean@@exemplo.org
description: "Analista de Infraestrutura"
mobile: 91234-0000
telephoneNumber: 8000
userPassword: senha123

root@ldap:~# ldapadd -h localhost -p389 -x -D cn=admin,dc=exemplo,dc=org -f user.ldif -W
Enter LDAP Password: 
adding new entry "uid=gean,ou=Usuarios,dc=exemplo,dc=org"

root@ldap:~# cat groups.ldif
dn: cn=analistas,ou=Grupos,dc=exemplo,dc=org
objectClass: top
objectClass: posixGroup
cn: analistas
gidNumber: 5000
memberUid: gean

root@ldap:~# ldapadd -h localhost -p389 -x -D cn=admin,dc=exemplo,dc=org -f groups.ldif -W
Enter LDAP Password: 
adding new entry "cn=analistas,ou=Grupos,dc=exemplo,dc=org"

root@ldap:~# ldapsearch -h localhost -p 389 -x -D cn=admin,dc=exemplo,dc=org -W -b ou=Usuarios,dc=exemplo,dc=org -LLL uid=gean
Enter LDAP Password: 
dn: uid=gean,ou=Usuarios,dc=exemplo,dc=org
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: top
uid: gean
sn: Gean
cn: Martins
mail: gean@@exemplo.org
description: "Analista de Infraestrutura"
mobile: 91234-0000
telephoneNumber: 8000
userPassword:: bWFydGluczU4

root@ldap:~# cat mod_user.ldif
dn: uid=gean,ou=Usuarios,dc=exemplo,dc=org
changetype: modify
add: givenName
givenName: Gean Martins
-
replace: mail
mail: gean@exemplo.org

root@ldap:~# ldapadd -h localhost -p389 -x -D cn=admin,dc=exemplo,dc=org -f mod_user.ldif -W
Enter LDAP Password: 
modifying entry "uid=gean,ou=Usuarios,dc=exemplo,dc=org"

root@ldap:~# ldapsearch -h localhost -p 389 -x -D cn=admin,dc=exemplo,dc=org -W -b ou=Usuarios,dc=exemplo,dc=org -LLL uid=gean
Enter LDAP Password: 
dn: uid=gean,ou=Usuarios,dc=exemplo,dc=org
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: top
uid: gean
sn: Gean
cn: Martins
description: "Analista de Infraestrutura"
mobile: 91234-0000
telephoneNumber: 8000
userPassword:: bWFydGluczU4
givenName: Gean Martins
mail: gean@exemplo.org