Open LDAP – Installation and configuration

Software Download

Download OpenLDAP Source code from 

http://www.openldap.org/software/download/OpenLDAP/openldap-release/

 

Pre Work :

Set below environmental variable. The path may change based on your local system install location of berkleyDB

———————

CPPFLAGS=”-I/usr/local/berkeleyDB/include”

export CPPFLAGS

LDFLAGS=”-L/usr/local/lib -L/usr/local/berkeleyDB/lib -R/usr/loca/berkeleyDB/lib”

export LDFLAGS

LD_LIBRARY_PATH=”/usr/local/berkeleyDB/lib”

export LD_LIBRARY_PATH

———————

 

Building OpenLDAP Source code: 

Go to folder where you have extracted openLDAP

Run below commands: (if you want/need to support TLS , run with flag –with-tls )

# ./configure 

# make depend

# make

# make test (if this fails, please logout and re-login and run this command)

 

Configuring openLDAP :

 

Go to /usr/local/etc/openldap 

Update slapd.conf under title :  BDB database definitions

suffix          “dc=ACME,dc=com”

rootdn          “cn=Manager,dc=idcqa,dc=com”

rootpw          password

Note: Replace “dc=amce,dc=com” with your required DN.

You can set password as hashed value. for that use slappasswd to generate the hash.  

 

Starting the Server

Start LDAP Server using below command

/usr/local/libexec/slapd -d127 -h “ldap://:389/ ldaps://:636/”  &

This will start server in debug mode and it will listen cleartext on 389 and TLS on 636

Sample LDIFs 

Use Below LDIF to add your first entry (save it as root.ldif)

dn: dc=ACME,dc=com

dc: ACME

description: ACME  Corp.

objectClass: dcObject

objectClass: organization

o: Acme

 

Command to add the entry to OpenLDAP: 

ldapadd -a -h localhost -p 389 -D “cn=Manager,dc=idcqa,dc=com” -w password  -f root.ldif -x

# ldapadd command will get installed along with openLDAP installation

 

Create Group:

create a ldif file with following contents to add a group under dc=Acme,dc=com

dn: cn=group1,dc=acme,dc=com

objectClass: groupOfNames

cn: group1

member:

Command:   ldapadd  -h localhost -p 389 -D “cn=Manager,dc=idcqa,dc=com” -w password  -f group.ldif -x

 

Creating User 

create a ldif file with following contents:

dn: cn=u1,dc=acme,dc=com

changetype: add

objectClass: inetOrgPerson

objectClass: organizationalPerson

objectClass: person

objectClass: top

sn: u1

cn: u1

mail: u1@acme.com

userPassword: password

Continue reading

Advertisements

Oracle Directory Service Control Center 11.1.1.5.0 – Installation and Configuration

Steps:

1.  Download and Unpack

    Download the package from Oracle  (Refer to http://docs.oracle.com/cd/E20295_01/html/821-1216/getting-dsee.html )
    Run Below command:
   

  # mkdir -p /var/tmp/dsee
  # cd /var/tmp/dsee
  # unzip -q ODSEE11_1_1_5_0_xxx.zip
  # cd ODSEE_ZIP_Distribution
  # unzip -q sun-dsee7.zip -d /app/Oracle
  # cd i/app/oracle/dsee7



2. Initialize DSCC Registry

 # ./dsccsetup ads-create
   Choose password for Directory Service Manager:
   Confirm password for Directory Service Manager:
   Creating DSCC registry...
   DSCC Registry has been created successfully

4. Create the WAR file for DSCC

 # ./dsccsetup war-file-create
    Created /app/SunoneInstaller/ODSEE_ZIP_Distribution/install-dir/dsee7/var/dscc7.war

5. Check port and the path assigned to DSCC registry.

# ./dsccsetup status
***
DSCC Agent is not registered in Cacao
***
DSCC Registry has been created
Path of DSCC registry is /app/SunoneInstaller/ODSEE_ZIP_Distribution/install-dir/dsee7/var/dcc/ads
Port of DSCC registry is 3998
***

6. To Pre-Configure the DSCC Agent

# ./dsccsetup cacao-reg
Configuring Cacao...
Cacao will listen on port 21162
Cacao has been successfully configured.
Registering DSCC Agent in Cacao...
Checking Cacao status...
Starting Cacao...
DSCC Agent will use locale en_US.UTF-8 and charset UTF-8
DSCC agent has been successfully registered in Cacao.

7. Deploy the DSCC WAR File
NOTE:  make sure that *.sh files are executeable, if not, the env vars aren't set at start up 

export CATALINA_HOME=/app/tomcat6_0_36/apache-tomcat-6.0.36
export CATALINA_BASE=/app/tomcat6_0_36/apache-tomcat-6.0.36
export JAVA_HOME=/app/jdk1.7.0_09

/app/tomcat6_0_36/apache-tomcat-6.0.36/bin/shutdown.sh
export CATALINA_OPTS="-Djava.awt.headless=true"
/app/tomcat6_0_36/apache-tomcat-6.0.36/bin/startup.sh

mkdir /app/tomcat6_0_36/apache-tomcat-6.0.36/webapps/dscc7
unzip -d /app/tomcat6_0_36/apache-tomcat-6.0.36/webapps/dscc7 /app/SunoneInstaller/ODSEE_ZIP_Distribution/install-dir/dsee7/var/dscc7.war

/app/tomcat6_0_36/apache-tomcat-6.0.36/bin/startup.sh

 Access admin portal using the URL -

http://<IP>:8080/dscc7

8. Access http://<IP>:8080/dscc7  , which is a very well designed Admin Interface , and create Directory server instances as per your requirement.