Skip to content

Instantly share code, notes, and snippets.

@machuz
Last active December 3, 2015 02:05
Show Gist options
  • Save machuz/036bc16ca661b5ed75a8 to your computer and use it in GitHub Desktop.
Save machuz/036bc16ca661b5ed75a8 to your computer and use it in GitHub Desktop.
LDAP環境を簡単にローカルへ構築する ref: http://qiita.com/ma2k8/items/0bba6b62a0ea3deb87cc
dn: uid=a123456,ou=People,dc=hoge,dc=co,dc=jp
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: ldapPublicKey
sn: hoge
cn: foo
uid: a123456
uidNumber: 10001
gidNumber: 10001
homeDirectory: /home/a123456
userPassword: {SSHA}9yfE3ENwK0oaC/zo4tFPnu3LpXTwAsnH
mail: hoge_foo@xxx.co.jp
loginShell: /bin/bash
dn:ou=People,dc=hoge,dc=local
objectClass: organizationalUnit
ou: People
$ apt-get install ldap-utils slapd ldapvi libnss-ldapd libpam-ldapd nscd
$ /etc/init.d/nscd restart
$ /etc/init.d/nslcd restart
$ /etc/init.d/slapd restart
$ ldapadd -x -D cn=admin,dc=hoge,dc=local -W -f base.ldif
$ ldapsearch -x -D cn=admin,dc=hoge,dc=local -W -LLL -b dc=hoge,dc=local dn
Enter LDAP Password:
dn: dc=hoge,dc=local
dn: cn=admin,dc=hoge,dc=local
dn: ou=People,dc=hoge,dc=local
$ ldapsearch -Q -LLL -Y EXTERNAL -H ldapi:/// -b cn=config dn
$ ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/openssh-lpk.ldif
$ ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/sudo.ldif
$ ldapadd -x -D cn=admin,dc=hoge,dc=local -W -H ldapi:// -f a123456.lidf
$ ldapsearch -x -D cn=admin,dc=hoge,dc=local -W -LLL -b dc=hoge,dc=local dn
Enter LDAP Password:
dn: dc=hoge,dc=local
dn: cn=admin,dc=hoge,dc=local
dn: ou=People,dc=hoge,dc=local
dn: uid=a123456,ou=People,dc=hoge,dc=local
URI ldap://xxx.xxx.xxx.xxx
BASE ou=People,dc=hoge,dc=local
TIMELIMIT 120
TIMEOUT 120
NETWORK_TIMEOUT 120
uid nslcd
gid nslcd
uri ldap://xxx.xxx.xxx.xxx
base ou=People,dc=hoge,dc=local
ldap_version 3
nss_initgroups_ignoreusers root
pam_authz_search (&(objectClass=posixAccount)(uid=$username))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment