centos7搭建LDAP服务器

[root@localhost ~]# yum install -y openldap-servers openldap-clients migrationtools

[root@localhost ~]# slappasswd
New password:
Re-enter new password:
{SSHA}RRt+8PBxQxuB5xZKCtA+C+J15p8R+FhW

[root@localhost ~]# rpm -ql openldap    #查看安装文件
[root@localhost ~]# rpm -ql openldap-servers
[root@localhost ~]# vi /etc/openldap/slapd.d/cn\=config\/olcDatabase\={2}hdb.ldif
#找到olcSuffix和olcRootDN进行修改为自己设置的dc，在文件末添加设置好的密码
olcSuffix: dc=xls,dc=com
olcRootDN: cn=Manager,dc=xls,dc=com

{SSHA}RRt+8PBxQxuB5xZKCtA+C+J15p8R+FhW

[root@localhost ~]# vi /etc/openldap/slapd.d/cn\=config\/olcDatabase\={1}monitor.ldif
olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=extern
al,cn=auth" read by dn.base="cn=Manager,dc=xls,dc=com" read by* none
structuralObjectClass: olcDatabaseConfig

[root@localhost ~]# cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG
[root@localhost ~]# chown -R ldap:ldap /var/lib/ldap/

[root@localhost ~]# slaptest -u

[root@localhost ~]# systemctl start slapd.service
[root@localhost ~]# systemctl enable slapd.service

[root@localhost ~]# ls /etc/openldap/schema/*.ldif | xargs -I {} sudo ldapadd -Y EXTERNAL -H ldapi:/// 
-f {}

[root@localhost ~]# yum install httpd -y

[root@localhost ~]# vi /etc/httpd/conf/httpd.conf
<Directory /var/www>
    AllowOverride all
    Require all granted
</Directory>

[root@localhost ~]# systemctl start httpd.service
[root@localhost ~]# systemctl enable httpd.service
[root@localhost ~]# curl http://127.0.0.1

[root@localhost ~]# yum install phpldapadmin

[root@localhost ~]# vi /etc/phpldapadmin/config.php
#取消以下几行的注释及设置注释
$servers->setValue(‘server’,’host’,’127.0.0.1’);
$servers->setValue(‘server’,’port’,389);
$servers->setValue(‘server’,’base’,array(‘dc=xls,dc=com’));
$servers->setValue(‘login’,’auth_type’,’session’);
$servers->setValue(‘login’,’attr’,’dn’);
#$servers->setValue(‘login’,’attr’,’uid’);

[root@localhost ~]# vi /etc/httpd/conf.d/phpldapadmin.conf
Order Deny,Allow   #取消注释

[root@localhost ~]# cd /etc/openldap
[root@localhost ~]# vi base.ldif
#添加以下内容
dn:dc=xls,dc=com
objectclass:dcObject
objectclass:organization
o:Example,Inc.
dc:xls

dn:cn=Manager,dc=xls,dc=com
objectclass:organizationalRole
cn:Manager

[root@localhost ~]# systemctl restart httpd.service

[root@localhost ~]# ldapadd -f base.ldif -x -D cn=Manager,dc=xls,dc=com -W