UOS配置LDAP

• 安装openldap,为 apacheQ 服务提供账户认证;
• 创建chinaskills.cn目录服务，并创建用户组ldsgp ,将zsuser、lsusr、 wuusr

---

一、安装服务

[root@Server04 /]# apt install slapd  ldap-utils -y
#设置slapd的密码

二、修改配置文件

[root@Server04 /]# nano /etc/ldap/ldap.conf  
BASE    dc=chinaskills,dc=cn
URI     192.168.10.4 192.168.10.4:389

三、更新ldap信息

[root@Server04 /]# dpkg-reconfigure slapd

四、测试是否安装完成

[root@Server04 /]# ldapsearch -x    
# extended LDIF
#
# LDAPv3
# base <dc=chinaskills,dc=cn> (default) with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#
# chinaskills.cn
dn: dc=chinaskills,dc=cn
objectClass: top
objectClass: dcObject
objectClass: organization
o: chinaskills
dc: chinaskills
# admin, chinaskills.cn
dn: cn=admin,dc=chinaskills,dc=cn
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
# search result
search: 2
result: 0 Success
# numResponses: 3
# numEntries: 2

五、创建用户组和用户

[root@Server04 /]# cd /etc/ldap/    #进入ldap目录
[root@Server04 /etc/ldap]# vim group.ldif  #新建文件group.ldif 后缀格式一定要对
dn: ou=users,dc=chinaskills,dc=cn
objectclass: organizationalUnit
ou: users
dn: ou=ldsgp,dc=chinaskills,dc=cn
objectclass :organizationalUnit
ou: group

[root@Server04 /etc/ldap]# nano zsuser.ldif
dn: uid=zsuser,ou=users,dc=chinaskills,dc=cn
objectClass: top
objectClass: account
objectClass: posixAccount
objectClass: shadowAccount
uid: zsuser
cn: zsuser
userPassword: ChinaSkill22
shadowLastChange: 0
shadowMax: 0
shadowWarning: 0
loginShell: /bin/bash
uidNumber: 1008
gidNumber: 1008
homeDirectory: /home/zsuser
gecos: zsuser

[root@Server04 /etc/ldap]# ldapadd -x -D "cn=admin,dc=chinaskills,dc=cn" -W  -f zsuser.ldif 
Enter LDAP Password: 
adding new entry "uid=zsuser,ou=users,dc=chinaskills,dc=cn"

六、将用户加入到组中

[root@Server04 /etc/ldap]#  nano jr.ldif
dn: cn=jr,ou=ldsgp,dc=chinaskills,dc=cn
objectclass: posixGroup
gidNumber: 10001
cn: jr 
memberUid: zsuser

[root@Server04 /etc/ldap]# ldapadd -x -D "cn=admin,dc=chinaskills,dc=cn" -W  -f jr.ldif 
Enter LDAP Password: 
adding new entry "cn=jr,ou=ldsgp,dc=chinaskills,dc=cn"

七、测试

[root@Server04 /etc/ldap]# ldapsearch -x -LLL | grep 'dn: dc'
dn: dc=chinaskills,dc=cn
root@Server04:/etc/ldap# ldapsearch -x -LLL | grep 'dn: uid'
dn: uid=zsuser,ou=users,dc=chinaskills,dc=cn