When the installation is complete, we actually need to reconfigure the LDAP package. Type the following to bring up the package configuration tool:
sudo dpkg-reconfigure slapd
You will be asked a series of questions about how you'd like to configure the software.
-
Omit OpenLDAP server configuration? No
-
DNS domain name?
- This will create the base structure of your directory path. Read the message to understand how it works.
- There are no set rules for how to configure this. If you have an actual domain name on this server, you can use that. Otherwise, use whatever you'd like.
- In this article, we will call it test.com
-
Organization name?
- Again, this is up to you
- We will use example in this guide.
-
Administrator password?
- Use the password you configured during installation, or choose another one
-
Database backend to use? HDB
-
Remove the database when slapd is purged? No
-
Move old database? Yes
-
Allow LDAPv2 protocol? No
The ldap-utils package comes with enough utilities to manage the directory but the long string of options needed can make them a burden to use. The ldapscripts package contains wrapper scripts to these utilities that some people find easier to use.
Install the package:
sudo apt-get install ldapscripts
#################################################
then add two nodes ou=Groups and ou=Users to the LDAP, before add a group to LDAP a stupid bug:
if the passwd contain some special character like"@",","....anything like that, then you will get error when add group use 'sudo ldapaddgroup test',like:
error adding group to ldap
so,give it a simple 'secret' passwd, like 'dog','monkey',,,,
############################################################################################## step by step :
first:
second:
sudo dpkg-reconfigure lapd #configure according to the link2 above, you'd better don't configure it by hand.
sudo apt-get install ldapscripts #install a convenient tools
and then, configure ldapscripts's configure file /etc/ldapscripts/ldapscripts.conf, add sentences, like:
SERVER=localhost
BINDDN='cn=admin,dc=example,dc=com'
BINDPWDFILE='/etc/ldapscripts/ldapscripts.passwd'
SUFFIX='dc=example,dc=com'
GSUFFIX='ou=Groups'
USUFFIX='ou=Users'
fourth:
add passwd to ldapscripts.passwd file :
sudo sh -c "echo -n 'monkey' > /etc/ldapscripts/ldapscripts.passwd"
then: you can operate LDAP using ldapscripts commands according to link 1.
warning: ldapscript will always return 'error adding group qa to LDAP',if the group already exists
start LDAP server: /etc/init.d/lsapd