변군이글루

phpLDAPadmin 설치 및 openldap 연동 phpLDAPadmin 설치 $ yum install -y epel-release $ yum install -y phpldapadmin phpldapadmin.conf 편집 - Require all granted 추가 $ vim /etc/httpd/conf.d/phpldapadmin.conf # # Web-based tool for managing LDAP servers # Alias /phpldapadmin /usr/share/phpldapadmin/htdocs Alias /ldapadmin /usr/share/phpldapadmin/htdocs # Apache 2.4 Require local Require all granted # Apache 2...

OpenLDAP 클라이언트 설치 OpenLDAP 클라이언트 패키지 설치 $ yum install -y openldap-clients nss-pam-ldapd ... Installing: nss-pam-ldapd openldap-clients Installing for dependencies: nscd $ systemctl restart nscd ldapsearch 명령어 확인 $ ldapsearch -h 192.168.56.101 -D cn=admin,dc=4wxyz,dc=com -b dc=4wxyz,dc=com -w ldappassword -s sub "(objectclass=*)" --output-- # extended LDIF # # LDAPv3 # base with scope subtree # f..

OpenLDAP 스크립트로 그룹 생성 및 사용자 계정 그룹 아이디 생성 $ cat ldapGroupAddv3.sh #!/bin/bash # GroupName, GidNumber echo "dn: cn=$1,ou=Groups,dc=4wxyz,dc=com changetype: add objectClass: top objectClass: posixGroup #objectClass: groupOfUniqueNames gidNumber: $2 cn: $1 #uniqueMember: #memberUid: 1501 description: groups" > .tmp/$1-group.ldif #DATA Insert docker exec openldap ldapmodify -a -x \ -D cn=admin,dc=4wxy..

OpenLDAP Password Policy overlay (ppolicy) activate-ppolicy.ldif 편집 $ vim activate-ppolicy.ldif dn: cn=module,cn=config cn: module{0} objectClass: top objectClass: olcModuleList olcModuleLoad: ppolicy.la olcModulePath: /usr/lib/ldap dn: olcOverlay={0}ppolicy,olcDatabase={1}hdb,cn=config objectClass: olcPPolicyConfig objectClass: olcOverlayConfig olcOverlay: ppolicy olcPPolicyDefault: cn=password..

OpenLDAP 그룹 및 계정 생성 정보 확인 $ docker exec openldap ldapsearch -x -b dc=4wxyz,dc=com \ -D "cn=admin,dc=4wxyz,dc=com" \ -w ldappassword --output-- # extended LDIF # # LDAPv3 # base with scope subtree # filter: (objectclass=*) # requesting: ALL # # 4wxyz.com dn: dc=4wxyz,dc=com objectClass: top objectClass: dcObject objectClass: organization o: 4wxyz dc: 4wxyz # search result search: 2 result: 0 Succ..