wiki v1

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== OpenLDAP ======
<code bash>
root@ldap:~# apt-get install slapd ldap-utils
</code>
**Informe e repita a senha do Administrador LDAP.**

<code bash>
root@ldap:~# dpkg-reconfigure slapd
</code>
Perguntas do dbconf:

  - – Omitir as Configurações: Não
  - – Domínio DNS: exemplo.org
  - – Nome da Empresa: Exemplo
  - – Senha do Admin: senha123
  - – Confirme a Senha: senha123
  - – Método de Armazenamento: HDB

<code bash>
root@ldap:~# ldapsearch -x -LLL -h 127.0.0.1 -b dc=exemplo,dc=org
dn: dc=exemplo,dc=org
objectClass: top
objectClass: dcObject
objectClass: organization
o: Exemplo
dc: exemplo

dn: cn=admin,dc=exemplo,dc=org
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
</code>

<code bash>
root@ldap:~# vim /etc/ldap/ldap.conf
[...]
BASE    dc=examplo,dc=org
URI     ldap://ldap.examplo.org
[...]
</code>

<code bash>
root@ldap:~# cat ou.ldif
dn: ou=Grupos,dc=exemplo,dc=org
objectClass: organizationalUnit
ou: Grupos
description: Grupos

dn: ou=Usuarios,dc=exemplo,dc=org
objectClass: organizationalUnit
ou: Usuarios
description: Usuarios
</code>

<code bash>
root@ldap:~# ldapadd -h localhost -p389 -x -D cn=admin,dc=exemplo,dc=org -f ou.ldif -W
Enter LDAP Password: 
adding new entry "ou=Grupos,dc=exemplo,dc=org"

adding new entry "ou=Usuarios,dc=exemplo,dc=org"
</code>

<code bash>
root@ldap:~# cat user.ldif
dn: uid=gean,ou=Usuarios,dc=exemplo,dc=org
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: top
uid: gean
sn: Gean
cn: Martins
mail: gean@@exemplo.org
description: "Analista de Infraestrutura"
mobile: 91234-0000
telephoneNumber: 8000
userPassword: senha123
</code>

<code bash>
root@ldap:~# ldapadd -h localhost -p389 -x -D cn=admin,dc=exemplo,dc=org -f user.ldif -W
Enter LDAP Password: 
adding new entry "uid=gean,ou=Usuarios,dc=exemplo,dc=org"
</code>

<code bash>
root@ldap:~# cat groups.ldif
dn: cn=analistas,ou=Grupos,dc=exemplo,dc=org
objectClass: top
objectClass: posixGroup
cn: analistas
gidNumber: 5000
memberUid: gean
</code>

<code bash>
root@ldap:~# ldapadd -h localhost -p389 -x -D cn=admin,dc=exemplo,dc=org -f groups.ldif -W
Enter LDAP Password: 
adding new entry "cn=analistas,ou=Grupos,dc=exemplo,dc=org"
</code>

<code bash>
root@ldap:~# ldapsearch -h localhost -p 389 -x -D cn=admin,dc=exemplo,dc=org -W -b ou=Usuarios,dc=exemplo,dc=org -LLL uid=gean
Enter LDAP Password: 
dn: uid=gean,ou=Usuarios,dc=exemplo,dc=org
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: top
uid: gean
sn: Gean
cn: Martins
mail: gean@@exemplo.org
description: "Analista de Infraestrutura"
mobile: 91234-0000
telephoneNumber: 8000
userPassword:: bWFydGluczU4
</code>

<code bash>
root@ldap:~# cat mod_user.ldif
dn: uid=gean,ou=Usuarios,dc=exemplo,dc=org
changetype: modify
add: givenName
givenName: Gean Martins
-
replace: mail
mail: gean@exemplo.org
</code>

<code bash>
root@ldap:~# ldapadd -h localhost -p389 -x -D cn=admin,dc=exemplo,dc=org -f mod_user.ldif -W
Enter LDAP Password: 
modifying entry "uid=gean,ou=Usuarios,dc=exemplo,dc=org"
</code>

<code bash>
root@ldap:~# ldapsearch -h localhost -p 389 -x -D cn=admin,dc=exemplo,dc=org -W -b ou=Usuarios,dc=exemplo,dc=org -LLL uid=gean
Enter LDAP Password: 
dn: uid=gean,ou=Usuarios,dc=exemplo,dc=org
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: top
uid: gean
sn: Gean
cn: Martins
description: "Analista de Infraestrutura"
mobile: 91234-0000
telephoneNumber: 8000
userPassword:: bWFydGluczU4
givenName: Gean Martins
mail: gean@exemplo.org
</code>