Delete READMEold.md
This commit is contained in:
parent
1ccc2207ac
commit
c102be963b
108
READMEold.md
108
READMEold.md
@ -1,108 +0,0 @@
|
|||||||
# ldapdock
|
|
||||||
*_a configurable container running openLDAP_*
|
|
||||||
|
|
||||||
A step by step approach on how to setup and run the openLDAP server on a classic systemd-less Docker image container, **optional steps are marked with __*__**
|
|
||||||
|
|
||||||
### _Creating the ldapdock container_
|
|
||||||
|
|
||||||
build ldapdock
|
|
||||||
```
|
|
||||||
> docker build -t ldapdock /path/to/dockerfile
|
|
||||||
```
|
|
||||||
|
|
||||||
__*__ after build, check the docker image has been created properly with the given REPOSITORY name
|
|
||||||
```
|
|
||||||
> docker images
|
|
||||||
REPOSITORY TAG IMAGE ID CREATED SIZE
|
|
||||||
ldapdock latest 0e4a1521b346 6 hours ago 138MB
|
|
||||||
```
|
|
||||||
|
|
||||||
run into the container setting up the LDAP server and the hostname
|
|
||||||
```
|
|
||||||
> docker run -h example.com -i -t ldapdock /bin/bash
|
|
||||||
```
|
|
||||||
|
|
||||||
### _Inside the ldapdock image_
|
|
||||||
|
|
||||||
start the openLDAP daemon server
|
|
||||||
```
|
|
||||||
> service slapd start
|
|
||||||
* Starting OpenLDAP slapd [ OK ]
|
|
||||||
```
|
|
||||||
|
|
||||||
__*__ edit base configuration of openLDAP server
|
|
||||||
```
|
|
||||||
> vim /etc/ldap/ldap.conf
|
|
||||||
```
|
|
||||||
|
|
||||||
__*__ check basic LDAP schemas are loaded
|
|
||||||
```
|
|
||||||
# ldapsearch -Q -LLL -Y EXTERNAL -H ldapi:/// -b cn=schema,cn=config dn
|
|
||||||
dn: cn=schema,cn=config
|
|
||||||
|
|
||||||
dn: cn={0}core,cn=schema,cn=config
|
|
||||||
|
|
||||||
dn: cn={1}cosine,cn=schema,cn=config
|
|
||||||
|
|
||||||
dn: cn={2}nis,cn=schema,cn=config
|
|
||||||
|
|
||||||
dn: cn={3}inetorgperson,cn=schema,cn=config
|
|
||||||
```
|
|
||||||
__*__ load basic LDAP schemas in case the base config didn't
|
|
||||||
```
|
|
||||||
# ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/core.ldif
|
|
||||||
SASL/EXTERNAL authentication started
|
|
||||||
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
|
|
||||||
SASL SSF: 0
|
|
||||||
adding new entry "cn=core,cn=schema,cn=config"
|
|
||||||
```
|
|
||||||
|
|
||||||
create a **password** for openLDAP root user
|
|
||||||
```
|
|
||||||
> slappasswd
|
|
||||||
New password:
|
|
||||||
Re-enter new password:
|
|
||||||
{SSHA}hashpwd
|
|
||||||
```
|
|
||||||
|
|
||||||
__*__ checkout the root DN configuration, the oldRootDN that we will setup later
|
|
||||||
```
|
|
||||||
> ldapsearch -Q -LLL -Y EXTERNAL -H ldapi:/// -b cn=config "(olcRootDN=*)" olcRootDN
|
|
||||||
dn: olcDatabase={0}config,cn=config
|
|
||||||
olcRootDN: cn=admin,cn=config
|
|
||||||
|
|
||||||
dn: olcDatabase={1}mdb,cn=config
|
|
||||||
olcRootDN: cn=admin,dc=example,dc=com
|
|
||||||
```
|
|
||||||
|
|
||||||
### _Base administrative Tasks for openLDAP_
|
|
||||||
|
|
||||||
create a file setting up our default root DN and our *hostname* **(change *dc=example,dc=com* as needed)**
|
|
||||||
```
|
|
||||||
> vim change_root.ldif
|
|
||||||
dn: olcDatabase={1}mdb,cn=config
|
|
||||||
changetype: modify
|
|
||||||
replace: olcRootDN
|
|
||||||
olcRootDN: cn=admin,dc=example,dc=com
|
|
||||||
```
|
|
||||||
now save this changes in the main database
|
|
||||||
```
|
|
||||||
> ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f change_root.ldif
|
|
||||||
```
|
|
||||||
|
|
||||||
create a file setting up our default rootPW **(change *{SSHA}hashpwd* with our previous *password*)**
|
|
||||||
```
|
|
||||||
> vim change_password.ldif
|
|
||||||
dn: olcDatabase={1}mdb,cn=config
|
|
||||||
changetype: modify
|
|
||||||
replace: olcRootPW
|
|
||||||
olcRootPW: {SSHA}hashpwd
|
|
||||||
```
|
|
||||||
now apply our new password for the main database
|
|
||||||
```
|
|
||||||
> ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f change_password.ldif
|
|
||||||
modifying entry "olcDatabase={1}mdb,cn=config"
|
|
||||||
```
|
|
||||||
we are done with our openLDAP root configuration and can begin creating new LDAP directories (.ldif files)
|
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue
Block a user