Ldap Server - Revision history

Nicolas: /* Ldap debug Code */

2019-10-25T12:30:51Z

Ldap debug Code

← Older revision		Revision as of 12:30, 25 October 2019
Line 118:		Line 118:

	=== Ldap debug Code ===		=== Ldap debug Code ===
	{\|		{\| class="wikitable alternance left"
	\|+ Debugging Levels		\|+ Debugging Levels

			! scope="col" \|Level
			! scope="col" \|Description
	\|-		\|-
	\|		!scope="row" \| -1
	! scope="~~col~~" ~~\| Level~~
	~~! scope="col" \| Description~~
	\|-
	\| -1
	\| enable all debugging		\| enable all debugging
	\|-		\|-
	\| 0		!scope="row" \| 0
	\| no debugging		\| no debugging
	\|-		\|-
	\| 1		!scope="row" \| 1
	\| trace function calls		\| trace function calls
	\|-		\|-
	\| 2		!scope="row" \| 2
	\| debug packet handling		\| debug packet handling
	\|-		\|-
	\| 4		!scope="row" \| 4
	\| heavy trace debugging		\| heavy trace debugging
	\|-		\|-
	\| 8		!scope="row" \| 8
	\| connection management		\| connection management
	\|-		\|-
	\|16		!scope="row" \|16
	\| print out packets sent and received		\| print out packets sent and received
	\|-		\|-
	\| 32		!scope="row" \| 32
	\| search filter processing		\| search filter processing
	\|-		\|-
	\| 64		!scope="row" \| 64
	\| configuration file processing		\| configuration file processing
	\|-		\|-
	\| 128		!scope="row" \| 128
	\| access control list processing		\| access control list processing
	\|-		\|-
	\| 256		!scope="row" \| 256
	\| stats log connections/operations/results		\| stats log connections/operations/results
	\|-		\|-
	\| 512		!scope="row" \| 512
	\| stats log entries sent		\| stats log entries sent
	\|-		\|-
	\|1024		!scope="row" \|1024
	\| print communication with shell backends		\| print communication with shell backends
	\|-		\|-
	\| 2048		!scope="row" \| 2048
	\| print entry parsing debugging		\| print entry parsing debugging
	\|}		\|}

Nicolas: /* Setup Ldap */

2019-10-25T12:16:55Z

Setup Ldap

← Older revision		Revision as of 12:16, 25 October 2019
Line 117:		Line 117:
	</syntaxhighlight>		</syntaxhighlight>

			=== Ldap debug Code ===
			{\|
			\|+ Debugging Levels
			\|-
			\|
			! scope="col" \| Level
			! scope="col" \| Description
			\|-
			\| -1
			\| enable all debugging
			\|-
			\| 0
			\| no debugging
			\|-
			\| 1
			\| trace function calls
			\|-
			\| 2
			\| debug packet handling
			\|-
			\| 4
			\| heavy trace debugging
			\|-
			\| 8
			\| connection management
			\|-
			\|16
			\| print out packets sent and received
			\|-
			\| 32
			\| search filter processing
			\|-
			\| 64
			\| configuration file processing
			\|-
			\| 128
			\| access control list processing
			\|-
			\| 256
			\| stats log connections/operations/results
			\|-
			\| 512
			\| stats log entries sent
			\|-
			\|1024
			\| print communication with shell backends
			\|-
			\| 2048
			\| print entry parsing debugging
			\|}

	== Backup / Restore ==		== Backup / Restore ==

Nicolas: /* Add a password to root */

2019-09-18T13:06:52Z

Add a password to root

← Older revision		Revision as of 13:06, 18 September 2019
Line 71:		Line 71:
	changetype: modify		changetype: modify
	add: olcRootPW		add: olcRootPW
	olcRootPW:{SSHA}... password from ~~ldappawd~~		olcRootPW:{SSHA}... password from slappasswd
	</syntaxhighlight>		</syntaxhighlight>

Nicolas at 13:06, 18 September 2019

2019-09-18T13:06:10Z

← Older revision		Revision as of 13:06, 18 September 2019
Line 45:		Line 45:

	=== Add a new Schema ===		=== Add a new Schema ===
	Add Samba Schema		* Add Samba Schema
	~~<syntaxhighlight lang="bash">ldapadd -Q -Y EXTERNAL -H ldapi:/// -f samba.ldif</syntaxhighlight>~~


	~~=== Change Database Suffix ===~~
	~~Use the following command~~
	~~<syntaxhighlight lang="bash">ldapmodify -Y EXTERNAL -H ldapi:///</syntaxhighlight>~~

	~~Then enter the following info~~
	~~<pre>dn: olcDatabase={1}mdb,cn=config~~
	~~changetype: modify~~
	~~replace: olcSuffix~~
	~~olcSuffix: dc=objclt,dc=com~~
	~~</pre>~~
	~~Press enter twice~~

	~~=== Change Root DN ===~~
	~~Retreive current information~~
	~~<syntaxhighlight lang="bash">ldapsearch -LLL -Y EXTERNAL -H ldapi:/// -b cn=config dn olcRootDN</syntaxhighlight>~~
	~~You need to modify the entry dn: "olcDatabase={1}mdb,cn=config"~~

	~~Proceed to modify~~
	~~<syntaxhighlight lang="bash">ldapmodify -Y EXTERNAL -H ldapi:///</syntaxhighlight>~~

	~~Provide the following information:~~
	* The entry we want to modify
	* The action and the parameter we want to modify
	* The value

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	dn: ~~olcDatabase={1}mdb,cn=config~~		ldapadd -Q -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/samba.ldif
	~~changetype~~: ~~modify~~		ldapadd -Q -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif
	~~replace~~: ~~olcRootDN~~		ldapadd -Q -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif
	~~olcRootDN~~: ~~cn=admin,dc=objclt,dc=com~~		ldapadd -Q -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif
	</syntaxhighlight>		</syntaxhighlight>

	~~Press enter twice to confirm~~		=== Identify the 'olcDatabase' ===
			* Retreive current information
	=== ~~Change Admin password~~ ===
	~~Generate password with ldappasswd~~
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	~~ldappasswd~~		ldapsearch -LLL -Y EXTERNAL -H ldapi:/// -b cn=config dn olcRootDN
	</syntaxhighlight>		</syntaxhighlight>
			* You need to modify the entry dn: "olcDatabase={1}mdb,cn=config"

	~~Proceed~~ to ~~modify~~		=== Add a password to root ===
			* Get SSHA password with slappasswd
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	~~ldapmodify -Y EXTERNAL -H ldapi:///~~		slappasswd
	</syntaxhighlight>		</syntaxhighlight>

	* ~~Replace the password~~ with the ~~string provided by ldappasswd~~		* Create an ldif file (ldaprootpasswd.ldif) with the following content
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	dn: olcDatabase={0}config,cn=config		dn: olcDatabase={0}config,cn=config
	changetype: modify		changetype: modify
	add: olcRootPW		add: olcRootPW
	olcRootPW: {SSHA}~~7dRfiVU48XwvVaZm9TIGr8FJoizS/cNu~~		olcRootPW:{SSHA}... password from ldappawd
	</syntaxhighlight>		</syntaxhighlight>

	~~Press enter twice to confirm~~		* Apply modification

	~~=== Update Access (acl) ===~~

	~~Proceed to modify~~
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	~~ldapmodify~~ -Y EXTERNAL -H ldapi:///		ldapadd -Y EXTERNAL -H ldapi:/// -f ldaprootpasswd.ldif
	</syntaxhighlight>		</syntaxhighlight>

			=== Ad Domain information ===
			* Create an ldif file (ldapdomain.ldif) with the following content
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	dn: olcDatabase={1}mdb,cn=config		dn: olcDatabase={1}mdb,cn=config
			changetype: modify
			replace: olcAccess
			olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth"
			read by dn.base="cn=admin,dc=objclt,dc=com" read by * none

			dn: olcDatabase={1}mdb,cn=config
			changetype: modify
			replace: olcSuffix
			olcSuffix: dc=objclt,dc=com

			dn: olcDatabase={1}mdb,cn=config
			changetype: modify
			replace: olcRootDN
			olcRootDN: cn=admin,dc=objclt,dc=com

			dn: olcDatabase={1}mdb,cn=config
			changetype: modify
			add: olcRootPW
			olcRootPW:{SSHA} password from ldappasswd

			dn: olcDatabase={1}mdb,cn=config
	changetype: modify		changetype: modify
	add: olcAccess		add: olcAccess
Line 120:		Line 111:
	olcAccess: {2}to * by dn="cn=admin,dc=objclt,dc=com" write by * read		olcAccess: {2}to * by dn="cn=admin,dc=objclt,dc=com" write by * read
	</syntaxhighlight>		</syntaxhighlight>

			* Apply modification
			<syntaxhighlight lang="bash">
			ldapadd -Y EXTERNAL -H ldapi:/// -f ldapdomain.ldif
			</syntaxhighlight>


	== Backup / Restore ==		== Backup / Restore ==

Nicolas: /* Change Admin password */

2019-09-18T05:21:24Z

Change Admin password

@@ Line 100: / Line 100: @@
 add: olcRootPW
 olcRootPW: {SSHA}7dRfiVU48XwvVaZm9TIGr8FJoizS/cNu
 </syntaxhighlight>

Nicolas: /* Change Admin password */

2019-09-18T05:16:33Z

Change Admin password

← Older revision		Revision as of 05:16, 18 September 2019
Line 85:		Line 85:
	=== Change Admin password ===		=== Change Admin password ===
	Generate password with ldappasswd		Generate password with ldappasswd
	<syntaxhighlight lang="bash">ldappasswd</syntaxhighlight>		<syntaxhighlight lang="bash">
			ldappasswd
			</syntaxhighlight>

	Proceed to modify		Proceed to modify
	~~<syntaxhighlight lang="bash">ldapmodify -Y EXTERNAL -H ldapi:///</syntaxhighlight>~~
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
			ldapmodify -Y EXTERNAL -H ldapi:///
			</syntaxhighlight>

			* Replace the password with the string provided by ldappasswd
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
			dn: olcDatabase={0}config,cn=config
			changetype: modify
			add: olcRootPW
			olcRootPW: {SSHA}7dRfiVU48XwvVaZm9TIGr8FJoizS/cNu
			</syntaxhighlight>

	== Backup / Restore ==		== Backup / Restore ==

Nicolas: /* Setup Ldap */

2019-09-18T05:10:59Z

Setup Ldap

← Older revision		Revision as of 05:10, 18 September 2019
Line 82:		Line 82:

	Press enter twice to confirm		Press enter twice to confirm

			=== Change Admin password ===
			Generate password with ldappasswd
			<syntaxhighlight lang="bash">ldappasswd</syntaxhighlight>

			Proceed to modify
			<syntaxhighlight lang="bash">ldapmodify -Y EXTERNAL -H ldapi:///</syntaxhighlight>
			<syntaxhighlight lang="bash">
			<syntaxhighlight lang="bash">

	== Backup / Restore ==		== Backup / Restore ==

Nicolas: /* Change Root DN */

2019-09-18T05:00:50Z

Change Root DN

← Older revision		Revision as of 05:00, 18 September 2019
Line 76:		Line 76:
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	dn: olcDatabase={1}mdb,cn=config		dn: olcDatabase={1}mdb,cn=config
			changetype: modify
	replace: olcRootDN		replace: olcRootDN
	olcRootDN: cn=admin,dc=objclt,dc=com		olcRootDN: cn=admin,dc=objclt,dc=com

Nicolas: /* Change Root DN */

2019-09-18T04:59:18Z

Change Root DN

← Older revision		Revision as of 04:59, 18 September 2019
Line 76:		Line 76:
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	dn: olcDatabase={1}mdb,cn=config		dn: olcDatabase={1}mdb,cn=config
	replace: olcRootDN~~</syntaxhighlight>~~		replace: olcRootDN
	olcRootDN: cn=admin,dc=objclt,dc=com		olcRootDN: cn=admin,dc=objclt,dc=com
	</syntaxhighlight>		</syntaxhighlight>

Nicolas: /* Change Root DN */

2019-09-18T04:58:52Z

Change Root DN

← Older revision		Revision as of 04:58, 18 September 2019
Line 70:		Line 70:

	Provide the following information:		Provide the following information:
	1) The entry we want to modify		* The entry we want to modify
	2) The action and the parameter we want to modify		* The action and the parameter we want to modify
	3) The value		* The value

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	dn: olcDatabase={1}mdb,cn=config		dn: olcDatabase={1}mdb,cn=config