OpenLDAP : Configure LDAP Server2020/05/11

	Configure LDAP Server in order to share user accounts in your local networks.
[1]	Install OpenLDAP.

root@dlp:~#

apt -y install slapd ldap-utils

# set LDAP admin password during installation like follows

 +--------------------------| Configuring slapd |-------------------------+
 | Please enter the password for the admin entry in your LDAP directory.  |
 |                                                                        |
 | Administrator password:                                                |
 |                                                                        |
 | ********______________________________________________________________ |
 |                                                                        |
 |                                 <Ok>                                   |
 |                                                                        |
 +------------------------------------------------------------------------+

# confirm settings

root@dlp:~#

slapcat

dn: dc=srv,dc=world
objectClass: top
objectClass: dcObject
objectClass: organization
o: srv.world
dc: srv
structuralObjectClass: organization
entryUUID: 102bac62-27a4-103a-853d-bb5d839899a7
creatorsName: cn=admin,dc=srv,dc=world
createTimestamp: 20200511072332Z
entryCSN: 20200511072332.363512Z#000000#000#000000
modifiersName: cn=admin,dc=srv,dc=world
modifyTimestamp: 20200511072332Z

dn: cn=admin,dc=srv,dc=world
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
userPassword:: e1NTSEF9ekcwNmk4Ny9OZjdEL2RGUlhDcHRWV2hxaVZiaGo0b3c=
structuralObjectClass: organizationalRole
entryUUID: 10303c6e-27a4-103a-853e-bb5d839899a7
creatorsName: cn=admin,dc=srv,dc=world
createTimestamp: 20200511072332Z
entryCSN: 20200511072332.393446Z#000000#000#000000
modifiersName: cn=admin,dc=srv,dc=world
modifyTimestamp: 20200511072332Z

[2]	Add base dn for Users and Groups.

root@dlp:~#

vi base.ldif

# create new

# change to your own suffix for the field [dc=srv,dc=world]

dn: ou=people,dc=srv,dc=world
objectClass: organizationalUnit
ou: people

dn: ou=groups,dc=srv,dc=world
objectClass: organizationalUnit
ou: groups

root@dlp:~#

ldapadd -x -D cn=admin,dc=srv,dc=world -W -f base.ldif

Enter LDAP Password:

# LDAP admin password (set in installation of openldap)

adding new entry "ou=people,dc=srv,dc=world"

adding new entry "ou=groups,dc=srv,dc=world"

Matched Content