pridani uvodniho zaznamu do ldapu

[Michal Fric]

Jiri Chaloupka wrote:
> Ale rootdn v slapd.conf je:
> suffix		"dc=firma,dc=cz"
> #suffix		"o=My Organization Name,c=US"
> rootdn		"ou=employes,dc=firma,dc=cz"
> 
> 
> 
> Dne Friday 26 April 2002 09:44 jste napsal(a):
> 
>>predpokladam, ze jste cetl man blbe. Kdyz chcete neco pridavat, musite se
>>autentikovat jako nekdo, kdo ma pravo pridavat do Ldapu nove zaznamy -
>>typicky je to Rootdn ze slapd.conf a prave tohoto uzivatele pisete za -D

Jednou jsem s tim taky bojoval a pomohlo mi, kdyz jsem si pocatecni 
nastaveni vygeneroval pomoci migracnich utilitek (v RH
/usr/share/openldap/migration/).

Prikladam jednoduche nastaveni, ktere jsem zaroven s tim jak jsem ho 
popisoval odzkousel.



[root na darkstar root]# cat  /etc/openldap/slapd.conf

include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/misc.schema
loglevel -1
TLSCertificateFile /etc/openldap/darkstar.pem
TLSCertificateKeyFile /etc/openldap/darkstar.pem
allow tls_2_anon
database 
ldbm
suffix 
	"o=test,c=cz"
rootdn 
	"cn=Manager,o=test,c=cz"
rootpw 
		heslo
directory 
/var/lib/ldap
index 
objectClass,uid,uidNumber,gidNumber,memberUid 
eq
index 
cn,mail,surname,givenname 
		eq,subinitial

Dulezite je

suffix 
	"o=test,c=cz"
rootdn 
	"cn=Manager,o=test,c=cz"
rootpw 
	heslo
directory 
/var/lib/ldap

Adresar /var/lib/ldap existuje a musi byt vlastnen uzivatelem ldap + 
nastavena prava 0700.
Nastartujeme LDAP (napr. /etc/init.d/ldap start)

Prvotni nastaveni:
[root na darkstar root]# cat base.ldif
dn: o=test,c=cz
o: test
objectClass: top
objectClass: organization
[root na darkstar root]#

Pridame pomoci:
[root na darkstar root]# ldapadd -x -D "cn=Manager,o=test,c=cz" -w heslo -f 
base.ldif
adding new entry "o=test,c=cz"

[root na darkstar root]#


Priklad pridani dalsiho kontejneru.
[root na darkstar root]# cat praha.ldif
dn: ou=praha,o=test,c=cz
ou: praha
objectClass: top
objectClass: organizationalUnit

[root na darkstar root]# ldapadd -x -D "cn=Manager,o=test,c=cz" -w heslo -f 
praha.ldif
adding new entry "ou=praha,o=test,c=cz"

Plneni kontejneru
[root na darkstar root]# cat person.ldif
dn: cn=Michal Fric, ou=praha, o=test, c=cz
objectclass: top
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
cn: Michal Fric
sn: Fric
givenName: Michal
telephonenumber: 81002222
description: Michal Fric v LDAP DB
street: Ulice 45
postalcode: 99 999
mail: mike na i.cz
[root na darkstar root]# ldapadd -x -D "cn=Manager,o=test,c=cz" -w heslo -f 
person.ldif
adding new entry "cn=Michal Fric, ou=praha, o=test, c=cz"

Pokusne vyhledani v LDAPU.

[root na darkstar root]# ldapsearch -x -b "ou=praha,o=test,c=cz"
version: 2

#
# filter: (objectclass=*)
# requesting: ALL
#

# praha, test, cz
dn: ou=praha,o=test,c=cz
ou: praha
objectClass: top
objectClass: organizationalUnit

# Michal Fric, praha, test, cz
dn: cn=Michal Fric, ou=praha, o=test, c=cz
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
cn: Michal Fric
sn: Fric
givenName: Michal
telephoneNumber: 81002222
description: Michal Fric v LDAP DB
street: Ulice 45
postalCode: 99 999
mail: mike na i.cz

# search result
search: 2
result: 0 Success

# numResponses: 3
# numEntries: 2

No a jestli jste se dostal az jsem tak mate funkcni LDAP...

-- 
S Pozdravem
Michal Fric