Albert Lea Data Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
<typo fs:xx-large; fw:bold>LDAP Topics</typo>
====== Installation & Configuration ======

==== Reset OpenLDAP root password ====
<code>slappasswd -h "{SHA}"
vim '/etc/openldap/slapd.d/cn=config/olcDatabase={1}bdb.ldif'</code>

==== LDAP PHP Module ====
  * yum install php-ldap
  * vim /etc/php.ini ... add: ''extension=ldap.so''
  * service httpd restart

==== Active Directory server discovery ====
In a command terminal: // (where the domain name is ''MS'') // <code>
nslookup
set type=all
_ldap._tcp.dc._msdcs.MS
</code>


====== Notes ======
<WRAP prewrap>
<code>
# Show all entries, as root ...
ldapsearch -h cosmos -D dc=root,dc=samudio,dc=net -w rootpassword -b dc=samudio,dc=net "(objectClass=inetOrgPerson)"

# Show all entries as authenticated user:
ldapsearch -h cosmos -D "uid=msamud1,ou=person,dc=samudio,dc=net" -w yourpassword -b dc=samudio,dc=net

# Show one searched-for entry:
ldapsearch -h cosmos -D "uid=msamud1,ou=person,dc=samudio,dc=net" -w yourpassword -b dc=samudio,dc=net "(&(objectClass=inetOrgPerson)(sn=Samudio))"

# To add an entry, something like:
ldapadd -x -D "dc=root,dc=samudio,dc=net" -w rootpassword -f optum.ldif

# Sample add.ldif content ...
dn: uid=mattbot,ou=person,dc=samudio,dc=net
objectclass: inetOrgPerson
cn: Matt Bot
sn: Bot
uid: mattbot
ou: InfoTech
mail: mattbot@albertleadata.com
mail: mattbot@albertleadata.org

# To change an entry, something like:
ldapmodify -x -D "dc=root,dc=samudio,dc=net" -w rootpassword -f chg.ldif

# Sample chg.ldif content ...
dn: uid=mattbot,ou=person,dc=samudio,dc=net
changetype: modify
add: ou
ou: bluejayuser

# Changing/adding a password for user, using root ...
ldappasswd -xv -D dc=root,dc=samudio,dc=net -w rootpassword -S "uid=msamud1,ou=person,dc=samudio,dc=net"
</code>
</WRAP>

==== Some specific settings ... ====
<code>
'ldap_host' => 'cosmos.samudio.net',
'ldap_group' => 'bluejayuser',
'ldap_udn' => 'dc=samudio,dc=net',
'ldap_bind' => 'uid=%s,%s',
'ldap_xia' => 'ou=person,dc=samudio,dc=net',
'ldap_filter' => '(&(objectClass=inetOrgPerson)(uid=%s))',
'ldap_key' => 'ou',
</code>
Albert Lea Data Wiki

User Tools

Site Tools

Page Tools
