2015-02-16



I’ll use this article to document the basic installation and configuration process of OpenLDAP and I’m going to do this on Ubuntu 14.04 LTS. This article can be understood as a very basic quick start guide. Wikipedia defines LDAP (Lightweight Directory Access Protocol) as :

“The Lightweight Directory Access Protocol (LDAP; /ˈɛldæp/) is an open, vendor-neutral, industry standard application protocol for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network.[1]Directory services play an important role in developing intranet and Internet applications by allowing the sharing of information about users, systems, networks, services, and applications throughout the network.[2] As examples, directory services may provide any organized set of records, often with a hierarchical structure, such as a corporate email directory. Similarly, a telephone directory is a list of subscribers with an address and a phone number.

LDAP is specified in a series of Internet Engineering Task Force (IETF) Standard Track publications called Request for Comments (RFCs), using the description language ASN.1. The latest specification is Version 3, published as RFC 4511. For example, here is an LDAP search translated into plain English: “Search in the company email directory for all people located in Nashville whose name contains ‘Jesse’ that have an email address. Please return their full name, email, title, and description.”[3]

A common usage of LDAP is to provide a “single sign on” where one password for a user is shared between many services, such as applying a company login code to web pages (so that staff log in only once to company computers, and then are automatically logged into the company intranet).[3]

LDAP is based on a simpler subset of the standards contained within the X.500 standard. Because of this relationship, LDAP is sometimes called X.500-lite.[4]“

In our lab we’ll see a base installation and an easy configuration (using 3 bash scripts)

1 STEP – INSTALL OPENLDAP

from our Ubuntu 14.04Lts Svr Edition run this command to install that

enter the password for admin user



confirm that



2 STEP – CONFIGURE SVR

At this point we need to make few configurations at our Svr

and modify that, this is as i configured my Svr

reboot

3 STEP – ADD A NEW DIRECTORY

before to continue with its configuration let’s check if everything is Ok.

this is the default configuration of Ldap after the installation, if you’ve received that the app has been installed well. Now we can proceed with the first step, we’ll create just 1 group that we’ll call “Group” then we’ll add another 1 (“Users”). To make our life more easy using a script

and add these lines, save after to make that

before to continue we’ve to reconfigure slapd

and answer to the some questions with your parameters, like that

now we can run this command to apply these grous to ldap

4 STEP – ADD LOCAL USERS

As for groups also for user we’ll use a script to add local users to ldap directory

add this lines

then exec that

then add local user on ldap, in our case we have only 1 user

4 STEP – ADD LOCAL GROUPS

As made for users we make the same think also for local groups

and add these lines

exec that

then add local groups to ldap

thats all, our ldap svr now is ready. To remove users or group we can use these commands

if we want to check that run

round 1 is ended.

Disclaimer: All the tutorials included on this site are performed in a lab environment to simulate a real world production scenario. As everything is done to provide the most accurate steps to date, we take no responsibility if you implement any of these steps in a production environment.

“WE LEARN FROM OUR MISTAKES”

Filed under: UBUNTU 14.04LTS LDAP SVR EDITION

Show more