okasion/ldapdock
2
1
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

Update INSTALL.md

Browse Source
This commit is contained in:
Marisa 2025-10-12 14:04:52 -04:00
parent 29f8b94b15
commit 954d8300f7
1 changed files with 11 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
INSTALL.md
View File

@ -103,7 +103,7 @@ adding new entry "cn=default,ou=policies,dc=example,dc=com"
You can change password policies like pwdMinLength, pwdMaxFailure, pwdMaxAge, etc. and all organizationalUnits (and therefore, their users) will be affected by default unless configured otherwise. You can change password policies like pwdMinLength, pwdMaxFailure, pwdMaxAge, etc. and all organizationalUnits (and therefore, their users) will be affected by default unless configured otherwise.
\ \
\ \
In order to enforce our password configuration we need something to control. In order to enforce our password configuration we need something to control. This is a short example.
Create the an organizationalUnit: Create the an organizationalUnit:
``` ```
root@example:/# cat > create_ou.ldif << EOF root@example:/# cat > create_ou.ldif << EOF
@ -122,9 +122,10 @@ Create a password hash for the new user marisa
root@example:/# slappasswd -s qwerty root@example:/# slappasswd -s qwerty
{SSHA}fgEXXr2J08jTVfgyOnkRL2I1JNL4Bp5V {SSHA}fgEXXr2J08jTVfgyOnkRL2I1JNL4Bp5V
``` ```
Copy-paste all this attributes after the command, remember to write down the hashed password correctly. Once the entry has been added, go back to shell with CTRL+C.
Create the new user marisa that will belong to organizationalUnit Supergirls
``` ```
root@example:/# ldapadd -x -D "cn=admin,dc=example,dc=com" -w admin -H ldapi:/// root@example:/# cat > create_user.ldif << EOF
dn: uid=marisa,ou=Supergirls,dc=example,dc=com dn: uid=marisa,ou=Supergirls,dc=example,dc=com
objectClass: inetOrgPerson objectClass: inetOrgPerson
objectClass: posixAccount objectClass: posixAccount
@ -139,11 +140,14 @@ homeDirectory: /home/marisa
loginShell: /bin/bash loginShell: /bin/bash
userPassword: {SSHA}fgEXXr2J08jTVfgyOnkRL2I1JNL4Bp5V userPassword: {SSHA}fgEXXr2J08jTVfgyOnkRL2I1JNL4Bp5V
mail: marisa@example.com mail: marisa@example.com
EOF
adding new entry "uid=marisa,ou=Supergirls,dc=example,dc=com"
^C
``` ```
marisa and all users added to Supergirls will respect the password default policies, you can check it out, example: ```
root@example:/etc/ldap/slapd.d# ldapadd -x -D "cn=admin,dc=example,dc=com" -w Op3nLd4p! -H ldapi:/// -f create_user.ldif
adding new entry "uid=marisa,ou=Supergirls,dc=example,dc=com"
```
User marisa and all that are added to Supergirls will respect the password default policies, you can check it out, example:
``` ```
root@example:/# ldappasswd -x -w qwerty -H ldapi:/// -D "uid=marisa,ou=Supergirls,dc=example,dc=com" -s marisakirisame root@example:/# ldappasswd -x -w qwerty -H ldapi:/// -D "uid=marisa,ou=Supergirls,dc=example,dc=com" -s marisakirisame
Result: Constraint violation (19) Result: Constraint violation (19)