Chapter 12. Cloning open source virtual servers 165
=============================================================================
Installing:
openldap-clients s390x 2.3.27-4 RHEL5 189 k
openldap-servers s390x 2.3.27-4 RHEL5 2.3 M
Installing for dependencies:
libtool-ltdl s390x 1.5.22-6.1 RHEL5 37 k
Transaction Summary
=============================================================================
Install 3 Package(s)
Update 0 Package(s)
Remove 0 Package(s)
Total download size: 2.5 M
Downloading Packages:
Running Transaction Test
warning: openldap-clients-2.3.27-4: Header V3 DSA signature: NOKEY, key ID 897da07a
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing: libtool-ltdl ######################### [1/3]
Installing: openldap-clients ######################### [2/3]
Installing: openldap-servers ######################### [3/3]
Installed: openldap-clients.s390x 0:2.3.27-4 openldap-servers.s390x 0:2.3.27-4
Dependency Installed: libtool-ltdl.s390x 0:1.5.22-6.1
Complete!
12.2.3 Configuring the OpenLDAP server
A detailed description of LDAP is beyond the scope of this book. Instead, brief configuration
recommendations are given in this section.
There are two important configuration values that must be chosen.
The suffix or base distinguished name of the LDAP Domain Information Tree (DIT) - the
most common suffix is to use your company’s DNS name.
The LDAP administrator or root name and password.
Choose an administrative password and run the slappasswd command, which displays an
encrypted version of it. The output of this command will be used in a configuration file, so you
may want to make a copy of it.
# slappasswd
New password: <lnx4vm>
Re-enter new password: <lnx4vm>
{SSHA}4FiGwLm+cy+I96TyiWMn4evNXSXa5aJ2
The OpenLDAP server configuration file is /etc/openldap/slapd.conf file. Make a backup
copy of it then modify the original. First set the suffix and root user distinguished name
(rootdn):
# cd /etc/openldap
# cp slapd.conf slapd.conf.orig
# vi slapd.conf
...
database bdb
# suffix "dc=my-domain,dc=com"
# rootdn "cn=Manager,dc=my-domain,dc=com"
suffix "dc=itso,dc=ibm,dc=com"
Komentarze do niniejszej Instrukcji