source: server/other/openldap.xml@ 03ecb3f9

10.0 10.1 11.0 6.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 ken/refactor-virt krejzi/svn lazarus nosym perl-modules qt5new systemd-11177 systemd-13485 trunk xry111/git-date xry111/git-date-for-trunk xry111/git-date-test
Last change on this file since 03ecb3f9 was 03ecb3f9, checked in by Randy McMurchy <randy@…>, 17 years ago

Updated build entities and added indexing tags to the GMP instructions

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@3634 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 11.8 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
3 "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7<!ENTITY openldap-download-http "http://gd.tuwien.ac.at/infosys/network/OpenLDAP/openldap-release/openldap-&openldap-version;.tgz">
8<!ENTITY openldap-download-ftp "ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-&openldap-version;.tgz">
9<!ENTITY openldap-md5sum "383691dbabe05ee2b72a3e9db2042a82">
10<!ENTITY openldap-size "2.6 MB">
11<!ENTITY openldap-buildsize "67 MB">
12<!ENTITY openldap-time "6.42 SBU">
13]>
14
15<sect1 id="openldap" xreflabel="OpenLDAP-&openldap-version;">
16<sect1info>
17<othername>$LastChangedBy$</othername>
18<date>$Date$</date>
19</sect1info>
20<?dbhtml filename="openldap.html"?>
21<title><application>Open<acronym>LDAP</acronym></application>-&openldap-version;
22</title>
23
24<sect2>
25<title>Introduction to <application>Open<acronym>LDAP</acronym></application>
26</title>
27
28<para>The <application>Open<acronym>LDAP</acronym></application> package
29provides an open source implementation of the Lightweight Directory
30Access Protocol.</para>
31
32<sect3><title>Package information</title>
33<itemizedlist spacing='compact'>
34<listitem><para>Download (HTTP):
35<ulink url="&openldap-download-http;"/></para></listitem>
36<listitem><para>Download (FTP):
37<ulink url="&openldap-download-ftp;"/></para></listitem>
38<listitem><para>Download MD5 sum: &openldap-md5sum;</para></listitem>
39<listitem><para>Download size: &openldap-size;</para></listitem>
40<listitem><para>Estimated disk space required:
41&openldap-buildsize;</para></listitem>
42<listitem><para>Estimated build time:
43&openldap-time;</para></listitem></itemizedlist>
44</sect3>
45
46<sect3><title><application>Open<acronym>LDAP</acronym></application>
47dependencies</title>
48<sect4><title>Required</title>
49<para><xref linkend="db"/></para>
50</sect4>
51
52<sect4><title>Recommended</title>
53<para><xref linkend="cyrus-sasl"/> and <xref linkend="openssl"/></para>
54</sect4>
55
56<sect4><title>Optional</title>
57<para><xref linkend="tcpwrappers"/>,
58<xref linkend="gdbm"/>,
59<ulink url="http://www.gnu.org/software/pth/">GNU Pth</ulink>, and
60<xref linkend="heimdal"/> or
61<xref linkend="mitkrb"/></para>
62</sect4>
63
64</sect3>
65
66</sect2>
67
68<sect2>
69<title>Installation of <application>Open<acronym>LDAP</acronym></application>
70</title>
71
72<para>Install <application>Open<acronym>LDAP</acronym></application> by
73running the following commands:</para>
74
75<screen><userinput><command>./configure --prefix=/usr --libexecdir=/usr/sbin \
76 --sysconfdir=/etc --localstatedir=/srv/ldap \
77 --enable-ldbm --disable-debug &amp;&amp;
78make depend &amp;&amp;
79make &amp;&amp;
80make test &amp;&amp;
81make install &amp;&amp;
82chmod 755 /usr/lib/libl*-2.2.so.7.0.13</command></userinput></screen>
83
84</sect2>
85
86<sect2>
87<title>Command explanations</title>
88
89<para><parameter>--libexecdir=/usr/sbin</parameter>: Installs the server
90executables in <filename class="directory">/usr/sbin</filename> instead of
91<filename class="directory">/usr/libexec</filename>.</para>
92
93<para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration file
94directory to avoid the default of
95<filename class="directory">/usr/etc</filename>.</para>
96
97<para><parameter>--localstatedir=/srv/ldap</parameter>: Sets the directory
98to use for the <acronym>LDAP</acronym> directory database, replication logs and
99run-time variable data.</para>
100
101<para><parameter>--enable-ldbm</parameter>: Build <command>slapd</command>
102with the primary database back end using either
103<application>Berkeley DB</application> or
104<application><acronym>GNU</acronym> Database Manager</application>.</para>
105
106<para><parameter>--disable-debug</parameter>: Disable debugging code.</para>
107
108<para><command>make test</command>: Validates the correct build of the
109package. If you've enabled <application>tcp_wrappers</application>, ensure you
110add 127.0.0.1 to the <parameter>slapd</parameter> line in the
111<filename>/etc/hosts.allow</filename> file if you have a
112restrictive <filename>/etc/hosts.deny</filename> file.</para>
113
114<para><command>chmod 755 /usr/lib/libl*-2.2.so.7.0.10</command>: This command
115adds the executable bit to the shared libraries.</para>
116
117</sect2>
118
119<sect2>
120<title>Configuring <application>Open<acronym>LDAP</acronym></application>
121</title>
122
123<sect3><title>Config files</title>
124<para><filename>/etc/openldap/*</filename></para>
125</sect3>
126
127<sect3><title>Configuration Information</title>
128<para>Configuring the <command>slapd</command> and <command>slurpd</command>
129servers can be complex. Securing the <acronym>LDAP</acronym> directory,
130especially if you are storing non-public data such as password databases,
131can also be a challenging task. You'll need to modify the
132<filename>/etc/openldap/slapd.conf</filename> and
133<filename>/etc/openldap/ldap.conf</filename> files to set up
134<application>Open<acronym>LDAP</acronym></application> for your particular
135needs.</para>
136
137<para>Resources to assist you with topics such as choosing a directory
138configuration, backend and database definitions, access control settings,
139running as a user other than root and setting a <command>chroot</command>
140environment include:
141</para>
142
143<itemizedlist spacing='compact'>
144<listitem><para>The <command>slapd</command> man page</para></listitem>
145<listitem><para>The <filename>slapd.conf</filename> man page</para></listitem>
146<listitem><para>The <ulink
147url="http://www.openldap.org/doc/admin22/">OpenLDAP 2.2 Administrator's
148Guide</ulink></para></listitem>
149<listitem><para>Documents located at
150<ulink url="http://www.openldap.org/pub/"/></para></listitem>
151</itemizedlist></sect3>
152
153<sect3><title>Utilizing <application>GDBM</application></title>
154<para>To utilize <application>GDBM</application> as the database
155backend, the <quote>database</quote> entry in
156<filename>/etc/openldap/slapd.conf</filename> must be changed from
157<quote>bdb</quote> to <quote>ldbm</quote>. You can use both by creating an
158additional database section in <filename>/etc/openldap/slapd.conf</filename>.
159</para></sect3>
160
161<sect3><title><application>Mozilla</application> Address Directory</title>
162<para>By default, <acronym>LDAP</acronym>v2 support is disabled in the
163<filename>slapd.conf</filename> file. Once the database is properly
164set up and <application>Mozilla</application> is configured to use the
165directory, you must add <option>allow bind_v2</option> to the
166<filename>slapd.conf</filename> file.</para></sect3>
167
168<sect3><title>Init Script</title>
169<para>To automate the startup of the <acronym>LDAP</acronym> server at system
170bootup, install the <filename>/etc/rc.d/init.d/openldap</filename> init script
171included in the <xref linkend="intro-important-bootscripts"/> package using the
172following command:</para>
173
174<screen><userinput><command>make install-openldap1</command></userinput></screen>
175
176<para><emphasis>Note:</emphasis> The init script you just installed only starts
177the <command>slapd</command> daemon. If you wish to also start the
178<command>slurpd</command> daemon at system startup, install a modified version
179of the script using this command:</para>
180
181<screen><userinput><command>make install-openldap2</command></userinput></screen>
182
183<note><para>The init script starts the daemons without any parameters. You'll
184need to modify the script to include the parameters needed for your specific
185configuration. See the <command>slapd</command> and <command>slurpd</command>
186man pages for parameter information.</para></note>
187</sect3>
188
189<sect3><title>Testing the Configuration</title>
190<para>Start the <acronym>LDAP</acronym> server using the init script:</para>
191
192<screen><userinput><command>/etc/rc.d/init.d/openldap start</command></userinput></screen>
193
194<para>Verify access to the <acronym>LDAP</acronym> server with the following
195command:</para>
196
197<screen><userinput><command>ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts</command></userinput></screen>
198
199<para>The expected result is:</para>
200<screen><computeroutput># extended LDIF
201#
202# LDAPv3
203# base &lt;&gt; with scope base
204# filter: (objectclass=*)
205# requesting: namingContexts
206#
207
208#
209dn:
210namingContexts: dc=my-domain,dc=com
211
212# search result
213search: 2
214result: 0 Success
215
216# numResponses: 2
217# numEntries: 1</computeroutput></screen>
218
219</sect3>
220</sect2>
221
222<sect2>
223<title>Contents</title>
224
225<para>The Open<acronym>LDAP</acronym> package contains
226<command>ldapadd</command>,
227<command>ldapcompare</command>,
228<command>ldapdelete</command>,
229<command>ldapmodify</command>,
230<command>ldapmodrdn</command>,
231<command>ldappasswd</command>,
232<command>ldapsearch</command>,
233<command>ldapwhoami</command>,
234<command>slapadd</command>,
235<command>slapcat</command>,
236<command>slapd</command>,
237<command>slapdn</command>,
238<command>slapindex</command>,
239<command>slappasswd</command>,
240<command>slaptest</command>,
241<command>slurpd</command>,
242<filename class="libraryfile">liblber</filename> and the
243<filename class="libraryfile">libldap</filename> libraries.</para>
244
245</sect2>
246
247<sect2><title>Description</title>
248
249<sect3><title>ldapadd</title>
250<para><command>ldapadd</command> opens a connection to an
251<acronym>LDAP</acronym> server, binds and adds entries.</para></sect3>
252
253<sect3><title>ldapcompare</title>
254<para><command>ldapcompare</command> opens a connection to an
255<acronym>LDAP</acronym> server, binds and performs a compare using specified
256parameters.</para></sect3>
257
258<sect3><title>ldapdelete</title>
259<para><command>ldapdelete</command> opens a connection to an
260<acronym>LDAP</acronym> server, binds and deletes one or more entries.</para>
261</sect3>
262
263<sect3><title>ldapmodify</title>
264<para><command>ldapmodify</command> opens a connection to an
265<acronym>LDAP</acronym> server, binds and modifies entries.</para></sect3>
266
267<sect3><title>ldapmodrdn</title>
268<para><command>ldapmodrdn</command> opens a connection to an
269<acronym>LDAP</acronym> server, binds and modifies the
270<acronym>RDN</acronym> of entries.</para></sect3>
271
272<sect3><title>ldappasswd</title>
273<para><command>ldappasswd</command> is a tool to set the password of an
274<acronym>LDAP</acronym> user.</para></sect3>
275
276<sect3><title>ldapsearch</title>
277<para><command>ldapsearch</command> opens a connection to an
278<acronym>LDAP</acronym> server, binds and performs a search using specified
279parameters.</para></sect3>
280
281<sect3><title>ldapwhoami</title>
282<para><command>ldapwhoami</command> opens a connection to an
283<acronym>LDAP</acronym> server, binds and displays whoami information.</para>
284</sect3>
285
286<sect3><title>slapadd</title>
287<para><command>slapadd</command> is used to add entries specified in
288<acronym>LDAP</acronym> Directory Interchange Format (<acronym>LDIF</acronym>)
289to an <acronym>LDAP</acronym> database.</para></sect3>
290
291<sect3><title>slapcat</title>
292<para><command>slapcat</command> is used to generate an <acronym>LDAP</acronym>
293<acronym>LDIF</acronym> output
294based upon the contents of a slapd database.</para></sect3>
295
296<sect3><title>slapd</title>
297<para><command>slapd</command> is the stand-alone <acronym>LDAP</acronym>
298server.</para></sect3>
299
300<sect3><title>slapdn</title>
301<para><command>slapdn</command> checks a list of string-represented
302<acronym>DN</acronym>s based on schema syntax.</para></sect3>
303
304<sect3><title>slapindex</title>
305<para><command>slapindex</command> is used to regenerate slapd
306indices based upon the current contents of a database.</para></sect3>
307
308<sect3><title>slappasswd</title>
309<para><command>slappasswd</command> is an Open<acronym>LDAP</acronym> password
310utility.</para></sect3>
311
312<sect3><title>slaptest</title>
313<para><command>slaptest</command> checks the sanity of the
314<filename>slapd.conf</filename> file.</para></sect3>
315
316<sect3><title>slurpd</title>
317<para><command>slurpd</command> is the stand-alone
318<acronym>LDAP</acronym> replication server.</para></sect3>
319
320<sect3><title>liblber and libldap</title>
321<para>These libraries support the <acronym>LDAP</acronym> programs and provide
322functionality for other programs interacting with <acronym>LDAP</acronym>.
323</para></sect3>
324
325</sect2>
326
327</sect1>
Note: See TracBrowser for help on using the repository browser.