LDap Server

[bcit6k]

Hi,

i am new in this forum and in this topic. So my question is ,how to build an ldap server. i already installed the ldap server software, but how can i configurate this server?

thanks for help

[mike]

Check out this webpage for a start.
http://networking.earthweb.com/netsysm/article.php/3088441

Also, I would suggest LDAP Systen Administration by O'Reilly.

Mike

[mhelios]

Another resource I've used in the past is this page:
http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/ref-guide/s1-ldap-quickstart.html
It also contains a link to the openldap quickstart guide which is concise and easy to follow.

[Jman]

Originally posted by bcit6k
configurate

Configurate. That's a fun word to say. :)

Sorry, back to your regularly scheduled Feodra support. :D

[Manju]

Hi,
Even I am new to this forum. I installed the ldap server. I want set mySql server as back end and i edited the slapd.conf file accordingly. but i get an error message " Unrecognized database type<sql>.
It is working with "bdb" backend.
Any help appreciated.

my slapd.conf file follows:

#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
ucdata-path "C:/openldap/ucdata"
include "C:/openldap/etc/schema/core.schema"
include "C:/openldap/etc/schema/cosine.schema"
include "C:/openldap/etc/schema/inetorgperson.schema"
# Define global ACLs to disable default read access.

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org

pidfile "C:/openldap/var/run/slapd.pid"
argsfile "C:/openldap/var/run/slapd.args"

# Load dynamic backend modules:
# modulepath "C:/openldap/libexec/openldap"
# moduleload back_bdb.la
# moduleload back_ldap.la
# moduleload back_ldbm.la
# moduleload back_passwd.la
# moduleload back_shell.la
moduleload back_sql.la
#bdb mysql
# Sample security restrictions
# Require integrity protection (prevent hijacking)
# Require 112-bit (3DES or better) encryption for updates
# Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64

# Sample access control policy:
# Root DSE: allow anyone to read it
# Subschema (sub)entry DSE: allow anyone to read it
# Other DSEs:
# Allow self write access
# Allow authenticated users read access
# Allow anonymous users to authenticate
# Directives needed to implement policy:
# access to dn.base="" by * read
# access to dn.base="cn=Subschema" by * read
# access to *
# by self write
# by users read
# by anonymous auth
#
# if no access controls are present, the default policy
# allows anyone and everyone to read anything but restricts
# updates to rootdn. (e.g., "access to * by * read")
#
# rootdn can always read and write EVERYTHING!

################################################## #####################
# BDB database definitions
################################################## #####################

database bdb
suffix "dc=my_company,dc=com"
rootdn "cn=Manager,dc=my_company,dc=com"

rootpw my_password
directory "C:/openldap/var/openldap-data"
index objectClass eq
schemacheck off

################################################## #####################
# sql database definitions
################################################## #####################

database sql
suffix "o=sql,c=RU"
rootdn "cn=root,o=sql,c=RU"
rootpw secret
dbname directory
dbuser root
dbpasswd
subtree_cond "ldap_entries.dn LIKE CONCAT('%',?)"
insentry_query "INSERT INTO ldap_entries (dn,oc_map_id,parent,keyval) VALUES (?,?,?,?)"
has_ldapinfo_dn_ru no





# Cleartext passwords, especially for the rootdn, should
# be avoid. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
#rootpw secret
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended
directory "C:/openldap/var/openldap-data/directory/"
# Indices to maintain
index objectClass eq