Ben's notes

Linux, Unix, network, radio...

User Tools

Site Tools


openldap_consumer

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
openldap_consumer [2015/09/14 13:21] – [Configure replication] adminopenldap_consumer [2015/09/15 07:21] – [Install and configure OpenLDAP] admin
Line 4: Line 4:
 =====CentOS 7 - OpenLDAP 2.4 consumer (slave)===== =====CentOS 7 - OpenLDAP 2.4 consumer (slave)=====
 ====Install SSSd client==== ====Install SSSd client====
-  * [[ldap:centos7client|Configure this consumer as client first.]]+  * [[ldap:centos7client|First, configure this consumer as client.]]
 ====TLS Certificate==== ====TLS Certificate====
   * Create a certificate and sign with CA, valid for 3 years. **You probably need to perform this step on the LDAP provider or CA system**:<code># certutil -S -n 'OpenLDAP Consumer' -t ",," \   * Create a certificate and sign with CA, valid for 3 years. **You probably need to perform this step on the LDAP provider or CA system**:<code># certutil -S -n 'OpenLDAP Consumer' -t ",," \
Line 105: Line 105:
 add: olcRootPW add: olcRootPW
 olcRootPW: ${MYHASH} olcRootPW: ${MYHASH}
 +EOF
 +</code>
 +  * **olcDatabase={2}hdb**: configure indexing:<code># ldapmodify -H ldapi:/// -x -D "cn=config" -W <<EOF
 +dn: olcDatabase={2}hdb,cn=config
 +changetype: modify
 +replace: olcDbIndex
 +olcDbIndex: objectClass eq,pres
 +olcDbIndex: ou,cn,mail,surname,givenname eq,pres,sub
 +olcDbIndex: uid,memberUid,gidNumber eq
 +-
 EOF EOF
 </code> </code>
Line 143: Line 153:
 EOF EOF
 </code> </code>
- 
 ====Open firewall port==== ====Open firewall port====
   * Open port 636:<code># firewall-cmd --permanent --zone public --add-service=ldaps   * Open port 636:<code># firewall-cmd --permanent --zone public --add-service=ldaps
openldap_consumer.txt · Last modified: 2021/10/09 15:14 by 127.0.0.1