04-openldap-数据库配置

[[email protected] ldap]# cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG
[[email protected] ldap]# chown -R ldap:ldap /etc/openldap/
[[email protected] ldap]# chown -R ldap:ldap /var/lib/ldap/
[[email protected] ldap]# chmod 700  /var/lib/ldap/
[[email protected] ldap]#
[[email protected] ldap]# ls  /var/lib/ldap/
DB_CONFIG
[[email protected] ldap]# slaptest  -u
config file testing succeeded
[[email protected] ldap]#
最终的配置文件
[[email protected] ldap]# egrep -v ‘^#|^.*#‘  /etc/openldap/slapd.conf
include/etc/openldap/schema/corba.schema
include/etc/openldap/schema/core.schema
include/etc/openldap/schema/cosine.schema
include/etc/openldap/schema/duaconf.schema
include/etc/openldap/schema/dyngroup.schema
include/etc/openldap/schema/inetorgperson.schema
include/etc/openldap/schema/java.schema
include/etc/openldap/schema/misc.schema
include/etc/openldap/schema/nis.schema
include/etc/openldap/schema/openldap.schema
include/etc/openldap/schema/ppolicy.schema
include/etc/openldap/schema/collective.schema
allow bind_v2
pidfile/var/run/openldap/slapd.pid
argsfile/var/run/openldap/slapd.args
TLSCACertificatePath /etc/openldap/certs
TLSCertificateFile "\"OpenLDAP Server\""
TLSCertificateKeyFile /etc/openldap/certs/password
access to *
by self write
by anonymous auth
by * read
databasebdb
suffix"dc=etiantian,dc=org"
checkpoint2048 10
rootdn"cn=admin,dc=etiantian,dc=org"
loglevel296
cachesize1000
directory/var/lib/ldap
index objectClass                       eq,pres
index ou,cn,mail,surname,givenname      eq,pres,sub
index uidNumber,gidNumber,loginShell    eq,pres
index uid,memberUid                     eq,pres,sub
index nisMapName,nisMapEntry            eq,pres,sub
rootpw{SSHA}+OjqniWD7vyzN9D9vRbYRE6KvI3Hjrw1
启动ldap
[[email protected] ldap]# /etc/init.d/slapd  restart
停止 slapd：                                               [失败]
正在启动 slapd：                                           [确定]
[[email protected] ldap]#
[[email protected] ldap]# chkconfig  slapd  on
[[email protected] ldap]# chkconfig --list  slapd
slapd          0:关闭1:关闭2:启用3:启用4:启用5:启用6:关闭
[[email protected] ldap]#
[[email protected] ldap]# lsof -i:389
COMMAND  PID USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
slapd   1470 ldap    7u  IPv4  11434      0t0  TCP *:ldap (LISTEN)
slapd   1470 ldap    8u  IPv6  11435      0t0  TCP *:ldap (LISTEN)
[[email protected] ldap]#
[[email protected] ldap]# ps -ef |grep ldap
ldap       1470      1  0 10:53 ?        00:00:00 /usr/sbin/slapd -h  ldap:/// ldapi:/// -u ldap
root       1481   1287  0 10:55 pts/0    00:00:00 grep ldap
[[email protected] ldap]#
[[email protected] ldap]# tail -f /var/log/ldap.log
Mar 25 10:59:51 ldap-server slapd[1603]: @(#) $OpenLDAP: slapd 2.4.40 (May 10 2016 23:30:49) $#012#[email protected]:/builddir/build/BUILD/openldap-2.4.40/openldap-2.4.40/build-servers/servers/slapd

启动校验是否正确：

[[email protected] ldap]# ldapsearch -LLL  -W  -x -H ldap://etiantian.org  -D "cn=admin,dc=etiantian,dc=org"  -b "dc=etiantian,dc=org"
Enter LDAP Password:
ldap_bind: Invalid credentials (49)
[[email protected] ldap]#
解决办法：
[email protected] ldap]# rm -rf /etc/openldap/slapd.d/*
[[email protected] ldap]# slaptest   -f /etc/openldap/slapd.conf  -F  /etc/openldap/slapd.d
[[email protected] ldap]# chown  -R ldap:ldap  /etc/openldap/
[[email protected] ldap]# /etc/init.d/slapd  restart
停止 slapd：                                               [确定]
正在启动 slapd：                                           [确定]
[[email protected] ldap]#
[[email protected] ldap]# ldapsearch -LLL  -W  -x -H ldap://etiantian.org  -D "cn=admin,dc=etiantian,dc=org"  -b "dc=etiantian,dc=org"
Enter LDAP Password:
No such object (32)  #表示正确
[[email protected] ldap]#