{"id":1657,"date":"2023-03-25T22:02:02","date_gmt":"2023-03-25T14:02:02","guid":{"rendered":"https:\/\/www.appblog.cn\/?p=1657"},"modified":"2023-04-23T21:55:07","modified_gmt":"2023-04-23T13:55:07","slug":"openldap-compilation-installation-and-configuration-under-centos-7","status":"publish","type":"post","link":"https:\/\/www.appblog.cn\/index.php\/2023\/03\/25\/openldap-compilation-installation-and-configuration-under-centos-7\/","title":{"rendered":"CentOS 7\u4e0bOpenLDAP\u7f16\u8bd1\u5b89\u88c5\u53ca\u914d\u7f6e"},"content":{"rendered":"<h2>\u8f6f\u4ef6\u83b7\u53d6<\/h2>\n<h3>OpenLDAP<\/h3>\n<p>OpenLDAP\u5b98\u7f51\u4e0b\u8f7d\uff1a<a target=\"_blank\" rel=\"noopener\" href=\"http:\/\/www.openldap.org\/software\/download\/\">http:\/\/www.openldap.org\/software\/download\/<\/a><br \/>\nOpenLDAP 2.4.50\uff1a<a target=\"_blank\" rel=\"noopener\" href=\"https:\/\/www.openldap.org\/software\/download\/OpenLDAP\/openldap-release\/openldap-2.4.50.tgz\">https:\/\/www.openldap.org\/software\/download\/OpenLDAP\/openldap-release\/openldap-2.4.50.tgz<\/a><\/p>\n<p><!-- more --><\/p>\n<h3>BDB<\/h3>\n<p>berkeley-db-5.1.29 (OpenLDAP\u5f53\u524d\u4e0e6.x\u53ca\u4ee5\u4e0a\u7248\u672c\u4e0d\u517c\u5bb9\uff0cREADEME\u4e2d\u660e\u786e\u5199\u51fa\u517c\u5bb94.4~4.8\u62165.0~5.1)\uff1a<a target=\"_blank\" rel=\"noopener\" href=\"http:\/\/download.Oracle.com\/berkeley-db\/db-5.1.29.tar.gz\">http:\/\/download.Oracle.com\/berkeley-db\/db-5.1.29.tar.gz<\/a><\/p>\n<p>Berkeley DB Downloads: <a target=\"_blank\" rel=\"noopener\" href=\"https:\/\/www.oracle.com\/database\/technologies\/related\/berkeleydb-downloads.html\">https:\/\/www.oracle.com\/database\/technologies\/related\/berkeleydb-downloads.html<\/a><br \/>\nBerkeley DB Release History: <a target=\"_blank\" rel=\"noopener\" href=\"https:\/\/www.oracle.com\/database\/technologies\/related\/berkeleydb-release-history.html\">https:\/\/www.oracle.com\/database\/technologies\/related\/berkeleydb-release-history.html<\/a><\/p>\n<h3>LDAP Administrtor<\/h3>\n<p>ldapadmin 2015.2\uff1a<\/p>\n<p>\u5b98\u7f51\u4e0b\u8f7d\uff1a<a target=\"_blank\" rel=\"noopener\" href=\"http:\/\/www.ldapbrowser.com\/download.htm\">http:\/\/www.ldapbrowser.com\/download.htm<\/a><br \/>\n64-bit\uff1a<a target=\"_blank\" rel=\"noopener\" href=\"http:\/\/softerra-downloads.com\/ldapadmin\/ldapadmin-4.18.21509.0-x64-eng.msi\">http:\/\/softerra-downloads.com\/ldapadmin\/ldapadmin-4.18.21509.0-x64-eng.msi<\/a><\/p>\n<h2>\u51c6\u5907<\/h2>\n<p>\u6253\u5f00\u9632\u706b\u5899<code>tcp 389\/636<\/code>\u7aef\u53e3<\/p>\n<p><code>tcp 389<\/code>\u662fopenldap\u660e\u6587\u4f20\u8f93\u7aef\u53e3\uff0c<code>tcp 636<\/code>\u662fssl\u52a0\u5bc6\u4f20\u8f93\u7684\u7aef\u53e3<\/p>\n<h2>\u5b89\u88c5OpenLDAP<\/h2>\n<h3>\u4f9d\u8d56\u5305<\/h3>\n<p>\u6d89\u53ca<code>libtool-ltdl<\/code>\u4e0e<code>libtool-ltdl-devel<\/code>\uff0c\u5982\u4e0d\u5b89\u88c5\uff0c\u5728\u7f16\u8bd1\u65f6\u62a5\u9519\uff1a<code>configure: error: could not locate libtool ltdl.h<\/code><\/p>\n<pre><code class=\"language-bash\">yum install *ltdl* -y<\/code><\/pre>\n<h3>\u5b89\u88c5BDB<\/h3>\n<pre><code class=\"language-bash\"># \u5fc5\u987b\u5728\u89e3\u538b\u5305\u7684build_unix\u76ee\u5f55\u4e2d\u7f16\u8bd1\u5b89\u88c5\uff0c\u5426\u5219\u4f1a\u62a5\u9519\n# wget http:\/\/download.Oracle.com\/berkeley-db\/db-5.1.29.tar.gz\n# tar -zxf db-5.1.29.tar.gz\n# cd db-5.1.29\/build_unix\/\n# ..\/dist\/configure --prefix=\/usr\/local\/berkeleydb\n# make\n# make install<\/code><\/pre>\n<h3>\u66f4\u65b0lib\u5e93<\/h3>\n<pre><code class=\"language-bash\">#\u4fdd\u8bc1\u5728\u540e\u9762\u7f16\u8bd1openldap\u65f6\u80fd\u627e\u5230lib\u548cinclude\u4e0b\u7684\u5e93\n# echo &quot;\/usr\/local\/berkeleydb\/lib\/&quot; &gt; \/etc\/ld.so.conf\n# ldconfig -v<\/code><\/pre>\n<h3>\u5b89\u88c5OpenLDAP<\/h3>\n<pre><code class=\"language-bash\"># \u7f16\u8bd1\u9009\u9879\u53ef\u4ee5\u901a\u8fc7.\/configure --help\u67e5\u770b\n# \u5176\u4e2dmake test\u4e00\u6b65\u65f6\u95f4\u8f83\u957f\n# \u5982\u679c\u672a\u8bbe\u7f6eCPPFLAGS\uff0cconfigure\u8fc7\u7a0b\u53ef\u80fd\u4f1a\u63d0\u793aconfigure: error: BDB\/HDB: BerkeleyDB not available \u6216 configure: error: BerkeleyDB version incompatible with BDB\/HDB backends\n# wget https:\/\/www.openldap.org\/software\/download\/OpenLDAP\/openldap-release\/openldap-2.4.50.tgz\n# tar -zxf openldap-2.4.50.tgz\n# cd openldap-2.4.50\n# .\/configure --prefix=\/usr\/local\/openldap --enable-syslog --enable-modules --enable-debug --with-tls CPPFLAGS=-I\/usr\/local\/berkeleydb\/include\/ LDFLAGS=-L\/usr\/local\/berkeleydb\/lib\/\n# make depend\n# make\n# make test\n# make install<\/code><\/pre>\n<h3>\u8bbe\u7f6e\u53ef\u6267\u884c\u547d\u4ee4<\/h3>\n<pre><code class=\"language-bash\"># \u5bf9openldap\u5ba2\u6237\u7aef\uff08bin\uff09\u4e0e\u670d\u52a1\u5668\u7aef\uff08sbin\uff09\u76f8\u5173\u6267\u884c\u6863\u6dfb\u52a0\u8f6f\u94fe\u63a5\uff0c\u4e5f\u53ef\u4ee5\u901a\u8fc7\u589e\u52a0\u73af\u5883\u53d8\u91cf\u7684\u65b9\u5f0f\u8bbe\u7f6e\n# cd \/usr\/local\/openldap\n# ln -s \/usr\/local\/openldap\/bin\/* \/usr\/bin\/\n# ln -s \/usr\/local\/openldap\/sbin\/* \/usr\/sbin\/<\/code><\/pre>\n<h2>\u7b80\u5355\u914d\u7f6e<\/h2>\n<h3>\u5b89\u88c5\u5b8c\u6210\u7684openldap\u76ee\u5f55\u7ed3\u6784<\/h3>\n<p>openldap\u5b89\u88c5\u5b8c\u6210\u540e\u76f8\u5173\u76ee\u5f55\u627f\u8f7d\u7684\u529f\u80fd\u5982\u4e0b\uff1a<\/p>\n<ul>\n<li><code>bin\/<\/code> \u5ba2\u6237\u7aef\u5de5\u5177\u5982ldapadd\u3001ldapsearch<\/li>\n<li><code>etc\/<\/code> \u5305\u542b\u4e3b\u914d\u7f6e\u6587\u4ef6slapd.conf\u3001schema\u3001DB_CONFIG\u7b49<\/li>\n<li><code>include\/<\/code><\/li>\n<li><code>lib\/<\/code><\/li>\n<li><code>libexec\/<\/code> \u670d\u52a1\u7aef\u542f\u52a8\u5de5\u5177slapd<\/li>\n<li><code>sbin\/<\/code> \u670d\u52a1\u7aef\u5de5\u5177\u5982slappasswd<\/li>\n<li><code>share\/<\/code><\/li>\n<li><code>var\/<\/code> bdb\u6570\u636e\u3001log\u5b58\u653e\u76ee\u5f55<\/li>\n<\/ul>\n<h3>\u914d\u7f6erootdn\u5bc6\u7801(optional)<\/h3>\n<pre><code class=\"language-bash\"># \u8bbe\u7f6erootdn\u5bc6\u7801\uff0c\u8fd9\u91cc\u8bbe\u7f6e\u4e3a123456\n# \u8fd9\u6837rootdn\u5bc6\u7801\u4e3a\u5bc6\u6587\u65b9\u5f0f\uff0c\u590d\u5236\u8f93\u51fa\u5bc6\u6587\u5230\u4e3b\u914d\u7f6e\u6587\u4ef6rootdn\u5bf9\u5e94\u7684\u4f4d\u7f6e\u5373\u53ef\uff0c\u5982\u679c\u4e0d\u60f3\u9ebb\u70e6\uff0c\u53ef\u4ee5\u5ffd\u7565\u6b64\u6b65\uff0c\u5728\u4e3b\u914d\u7f6e\u6587\u4ef6\u4e2d\u4f7f\u7528\u660e\u6587\u5373\u53ef\n# cd \/usr\/local\/openldap\/\n# slappasswd\nNew password:\nRe-enter new password:\n{SSHA}K9+WK\/t1e0V0K6pUMOyTsaTwkDBNEDiP<\/code><\/pre>\n<h3>\u4e3b\u914d\u7f6e\u6587\u4ef6slapd.conf<\/h3>\n<pre><code class=\"language-bash\"># cd \/usr\/local\/openldap\/etc\/openldap\/\n# vim slapd.conf<\/code><\/pre>\n<blockquote>\n<p>\u5de8\u5751\uff1a\u52a1\u5fc5\u53bb\u9664\u914d\u7f6e\u6587\u4ef6<code>slapd.conf<\/code>\u4e2d\u7684\u6ce8\u91ca\uff08\u6587\u4e2d\u53ea\u662f\u65b9\u4fbf\u6807\u8bc6\u65b0\u589e\u4ee5\u53ca\u4fee\u6539\u7684\u5185\u5bb9\uff09\uff0c\u5426\u5219\u5bfc\u81f4OpenLDAP\u4e0d\u80fd\u542f\u52a8\uff0c\u62a5\u9519\u5982\u4e0b\uff1a<\/p>\n<\/blockquote>\n<pre><code class=\"language-bash\"># \/usr\/local\/openldap\/libexec\/slapd -d 256\n5f215a08 @(#) $OpenLDAP: slapd 2.4.50 (Jul 29 2020 18:31:17) $\n    root@kec-web:\/root\/soft\/openldap-2.4.50\/servers\/slapd\n5f215a08 slapd stopped.\n5f215a08 connections_destroy: nothing to destroy.<\/code><\/pre>\n<pre><code class=\"language-bash\">#schema\u9ed8\u8ba4\u53ea\u6709core.schema\uff0c\u5404\u7ea7\u9700\u8981\u6dfb\u52a0\uff0c\u8fd9\u91cc\u5c06\u540c\u914d\u7f6e\u6587\u4ef6\u4e00\u4e2a\u76ee\u5f55\u7684schema\u76ee\u5f55\u4e2d\u6709\u7684schema\u6587\u4ef6\u90fd\u52a0\u5230\u914d\u7f6e\u6587\u4ef6\u4e2d\ninclude         \/usr\/local\/openldap\/etc\/openldap\/schema\/core.schema\ninclude \/usr\/local\/openldap\/etc\/openldap\/schema\/collective.schema    #\u65b0\u589e\ninclude \/usr\/local\/openldap\/etc\/openldap\/schema\/corba.schema    #\u65b0\u589e\ninclude \/usr\/local\/openldap\/etc\/openldap\/schema\/cosine.schema    #\u65b0\u589e\ninclude \/usr\/local\/openldap\/etc\/openldap\/schema\/duaconf.schema    #\u65b0\u589e\ninclude \/usr\/local\/openldap\/etc\/openldap\/schema\/dyngroup.schema    #\u65b0\u589e\ninclude \/usr\/local\/openldap\/etc\/openldap\/schema\/inetorgperson.schema    #\u65b0\u589e\ninclude \/usr\/local\/openldap\/etc\/openldap\/schema\/java.schema    #\u65b0\u589e\ninclude \/usr\/local\/openldap\/etc\/openldap\/schema\/misc.schema    #\u65b0\u589e\ninclude \/usr\/local\/openldap\/etc\/openldap\/schema\/nis.schema    #\u65b0\u589e\ninclude \/usr\/local\/openldap\/etc\/openldap\/schema\/openldap.schema    #\u65b0\u589e\ninclude \/usr\/local\/openldap\/etc\/openldap\/schema\/pmi.schema    #\u65b0\u589e\ninclude \/usr\/local\/openldap\/etc\/openldap\/schema\/ppolicy.schema    #\u65b0\u589e\n\npidfile     \/usr\/local\/openldap\/var\/run\/slapd.pid\nargsfile    \/usr\/local\/openldap\/var\/run\/slapd.args\n\n#\u65b0\u589e\u65e5\u5fd7\u6587\u4ef6\u7ea7\u522b\u4e0e\u8def\u5f84\uff0c\u9700\u8981\u5728\u7f16\u8bd1\u65f6--enable-debug\uff0c\u5426\u5219\u65e5\u5fd7\u6587\u4ef6\u8f93\u51fa\uff0c\u4e0d\u5f71\u54cd\u8c03\u8bd5\u6a21\u5f0f\nloglevel    256    #\u65b0\u589e\nlogfile     \/usr\/local\/openldap\/var\/slapd.log    #\u65b0\u589e\n\n#\u8fd9\u91cc\u4f7f\u7528mdb\u505a\u540e\u7aef\u6570\u636e\u5e93\uff0c\u4e5f\u53ef\u4fee\u6539\u4e3a&quot;bdb&quot;\u53c2\u6570\uff0c\u5728OpenLDAP \u5b98\u65b9\u6587\u6863&quot; 11.4. LMDB&quot;\u7ae0\u8282\u4e2d\u6709\u4ecb\u7ecdmdb\u662f\u63a8\u8350\u4f7f\u7528\u7684\u540e\u7aef\u6570\u636e\u5e93\ndatabase    mdb\n\n#\u4f7f\u7528mdb\u505a\u540e\u7aef\u6570\u636e\u5e93\u65f6\uff0c\u6839\u636e\u5b98\u65b9\u6587\u6863\u4e2d\u8bf4\u660e\u9700\u8981\u8bbe\u7f6e\u4e00\u4e2a\u7a7a\u95f4\u503c\uff1a&quot;In addition to the usual parameters that a minimal configuration requires, the mdb backend requires a maximum size to be set. This should be the largest that the database is ever anticipated to grow (in bytes). The filesystem must also provide enough free space to accommodate this size.&quot;\n#\u5982\u679c\u4f7f\u7528bdb\u505a\u540e\u7aef\u6570\u636e\u5e93\uff0c\u9700\u8981\u5c06\u6b64\u9879\u53c2\u6570\u6ce8\u91ca\nmaxsize        1073741824\n\n#\u4fee\u6539\u57df\u540d\u53ca\u7ba1\u7406\u5458\u8d26\u6237\u540d;\nsuffix        &quot;dc=sys,dc=com&quot;    #\u4fee\u6539\nrootdn        &quot;cn=admin,dc=sys,dc=com&quot;    #\u4fee\u6539\n\n#\u4f7f\u7528\u5bc6\u6587\u5bc6\u7801\uff0c\u5373\u524d\u9762\u4f7f\u7528slappasswd\u751f\u6210\u7684\u5bc6\u6587;\nrootpw        {SSHA}K9+WK\/t1e0V0K6pUMOyTsaTwkDBNEDiP    #\u4fee\u6539\n\n#openldap\u6570\u636e\u76ee\u5f55\uff0c\u91c7\u7528mdb\u65f6\uff0c\u5728\u76f8\u5e94\u76ee\u5f55\u751f\u6210&quot;data.mdb&quot;\u4e0e&quot;lock.mdb&quot;\u6587\u4ef6\uff1b\u91c7\u7528bdb\u65f6\uff0c\u5728\u76f8\u5e94\u76ee\u5f55\u751f\u6210&quot;dn2id.bdb&quot;\u4e0e&quot;id2entry.bdb&quot;\uff0c\u53ca\u591a\u4e2a&quot;__db.00*&quot;\u6587\u4ef6\ndirectory    \/usr\/local\/openldap\/var\/openldap-data\n\nindex    objectClass    eq<\/code><\/pre>\n<h3>\u521d\u59cb\u5316OpenLADP(optional)<\/h3>\n<pre><code class=\"language-bash\"># \u5982\u679c\u91c7\u7528mdb\u505a\u540e\u7aef\u6570\u636e\u5e93\uff0c\u6b64\u6b65\u53ef\u5ffd\u7565\uff0cDB_CONFIG\u662f bdb\/hdb\u6570\u636e\u5e93\u4f7f\u7528\u7684\n# \u4e0e\u4e3b\u914d\u7f6e\u6587\u4ef6\u4e2d\u7684\u914d\u7f6e\u6709\u5173\uff0c\u4e3b\u914d\u7f6e\u6587\u4ef6\u786e\u5b9a\u4f7f\u7528bdb\u4e0e\u6570\u636e\u5b58\u653e\u8def\u5f84\n# cd \/usr\/local\/openldap\/var\/openldap-data\/\n# cp DB_CONFIG.example DB_CONFIG<\/code><\/pre>\n<h3>\u542f\u52a8OpenLADP<\/h3>\n<pre><code class=\"language-bash\"># \u76f4\u63a5\u5728\u540e\u53f0\u5de5\u4f5c\n# \u975eroot\u7528\u6237\u4e0d\u80fd\u76d1\u542c\u7aef\u53e31~1024\uff0c\u5982\u679c\u662f\u975eroot\u7528\u6237\uff0c\u6709\u53ef\u80fd\u9700\u8981\u91cd\u65b0\u5b9a\u4e49\u670d\u52a1\u7aef\u53e3\n# \/usr\/local\/openldap\/libexec\/slapd\n\n# \u5728\u524d\u7aef\u5de5\u4f5c\uff0c\u8f93\u51fadebug\u4fe1\u606f\n# \/usr\/local\/openldap\/libexec\/slapd -d 256<\/code><\/pre>\n<h3>\u9a8c\u8bc1<\/h3>\n<h4>ldapsearch\u9a8c\u8bc1<\/h4>\n<pre><code class=\"language-bash\"># ldapsearch -x -b &#039;&#039; -s base&#039;(objectclass=*)&#039;<\/code><\/pre>\n<p>\u8fd4\u56de\u5982\u4e0b\u5185\u5bb9\u8bf4\u660eopenldap\u5df2\u7ecf\u542f\u52a8\u8fd0\u884c\u6210\u529f\uff1a<\/p>\n<pre><code class=\"language-bash\"># extended LDIF\n#\n# LDAPv3\n# base &lt;&gt; with scope baseObject\n# filter: (objectclass=*)\n# requesting: ALL\n#\n\n#\ndn:\nobjectClass: top\nobjectClass: OpenLDAProotDSE\n\n# search result\nsearch: 2\nresult: 0 Success\n\n# numResponses: 2\n# numEntries: 1<\/code><\/pre>\n<p>\u6216\u8005<\/p>\n<pre><code class=\"language-bash\"># ldapsearch -x -b &#039;&#039; -s base &#039;(objectclass=*)&#039; namingContexts<\/code><\/pre>\n<p>\u8fd4\u56de\u5982\u4e0b\u5185\u5bb9\u4ea6\u4ee3\u8868openldap\u5df2\u7ecf\u542f\u52a8\u8fd0\u884c\u6210\u529f\uff1a<\/p>\n<pre><code class=\"language-bash\"># extended LDIF\n#\n# LDAPv3\n# base &lt;&gt; with scope baseObject\n# filter: (objectclass=*)\n# requesting: namingContexts \n#\n\n#\ndn:\nnamingContexts: dc=sys,dc=com\n\n# search result\nsearch: 2\nresult: 0 Success\n\n# numResponses: 2\n# numEntries: 1<\/code><\/pre>\n<h4>\u7aef\u53e3\u9a8c\u8bc1<\/h4>\n<pre><code class=\"language-bash\"># netstat -tunlp | grep 389\ntcp        0      0 0.0.0.0:389             0.0.0.0:*               LISTEN      30901\/slapd         \ntcp6       0      0 :::389                  :::*                    LISTEN      30901\/slapd<\/code><\/pre>\n<h4>\u8fdb\u7a0b\u9a8c\u8bc1<\/h4>\n<pre><code class=\"language-bash\"># ps -ef | grep slapd\nroot     30901     1  0 19:34 ?        00:00:00 \/usr\/local\/openldap\/libexec\/slapd\n\n# ps aux | grep slapd\nroot     30901  0.0  0.6 1324952 48148 ?       Ssl  19:34   0:00 \/usr\/local\/openldap\/libexec\/slapd<\/code><\/pre>\n<h2>\u7b80\u5355\u4f7f\u7528(\u793a\u4f8b)<\/h2>\n<h3>\u521b\u5efa1\u4e2a\u7ba1\u7406\u5458\u8d26\u53f7<\/h3>\n<h4>\u7f16\u8f91ldif\u6587\u4ef6<\/h4>\n<blockquote>\n<p>\u6ce8\u610f\u4e0eslapd.conf\u6587\u4ef6\u4e2d\u4fdd\u6301\u4e00\u81f4\uff0c\u4e0b\u9762\u7684\u547d\u4ee4\u540c\u7406\uff0c\u672c\u4eba\u66fe\u5728\u4e0b\u9762\u7684ldapadd\u547d\u4ee4\u4e2d\u5c06&quot;admin&quot;\u5199\u6210\u4e86&quot;amdin&quot;\uff0c\u5bfc\u81f4\u4e00\u76f4\u62a5<code>ldap_bind: Invalid credentials (49)<\/code>\u9519(\u6bcf\u6b21\u90fd\u662f\u7ffb\u56de\u4e0a\u4e00\u6761\u547d\u4ee4\u6267\u884c)\uff0c\u6392\u67e5\u4e863\u4e2a\u5c0f\u65f6\u5de6\u53f3\u624d\u53d1\u73b0\u3002<\/p>\n<\/blockquote>\n<pre><code class=\"language-bash\"># vim test.ldif<\/code><\/pre>\n<pre><code class=\"language-bash\">dn: dc=sys,dc=com\nobjectclass: dcObject\nobjectclass: organization\no: SYS.Inc\ndc: sys\n\ndn: cn=admin,dc=sys,dc=com\nobjectclass: organizationalRole\ncn: admin<\/code><\/pre>\n<h4>\u63d2\u5165\u6570\u636e\u5e93<\/h4>\n<pre><code class=\"language-bash\"># ldapadd -x -D &quot;cn=admin,dc=sys,dc=com&quot; -W -f test.ldif<\/code><\/pre>\n<p>\u53ef\u4ee5\u770b\u5230\u8d26\u53f7\u5df2\u7ecf\u52a0\u5165\u5230ldap\u4e2d\uff1a<\/p>\n<pre><code class=\"language-bash\"># ldapadd -x -D &quot;cn=admin,dc=sys,dc=com&quot; -W -f test.ldif\nEnter LDAP Password: \nadding new entry &quot;dc=sys,dc=com&quot;\n\nadding new entry &quot;cn=admin,dc=sys,dc=com&quot;<\/code><\/pre>\n<h4>\u9a8c\u8bc1<\/h4>\n<pre><code class=\"language-bash\"># ldapsearch -x -b &#039;dc=sys,dc=com&#039; &#039;(objectClass=*)&#039;<\/code><\/pre>\n<pre><code class=\"language-bash\"># extended LDIF\n#\n# LDAPv3\n# base &lt;dc=sys,dc=com&gt; with scope subtree\n# filter: (objectClass=*)\n# requesting: ALL\n#\n\n# sys.com\ndn: dc=sys,dc=com\nobjectClass: dcObject\nobjectClass: organization\no: SYS.Inc\ndc: sys\n\n# admin, sys.com\ndn: cn=admin,dc=sys,dc=com\nobjectClass: organizationalRole\ncn: admin\n\n# search result\nsearch: 2\nresult: 0 Success\n\n# numResponses: 3\n# numEntries: 2<\/code><\/pre>\n<h3>\u521b\u5efa1\u4e2a\u5177\u6709\u90e8\u95e8\u5c5e\u6027\u7684\u5458\u5de5<\/h3>\n<h4>\u7f16\u8f91ldif\u6587\u4ef6<\/h4>\n<p>\u8fd9\u91cc\u5176\u5b9e\u662f\u5148\u521b\u5efa1\u4e2a\u90e8\u95e8\u201cit\u201d\uff0c\u518d\u5728\u201cit\u201d\u90e8\u95e8\u521b\u5efa\u4e861\u4e2a\u5458\u5de5\uff0c\u5b9e\u9645\u4e0a\u662f\u4e24\u6761\u547d\u4ee4<\/p>\n<pre><code class=\"language-bash\"># vim test1.ldif <\/code><\/pre>\n<pre><code class=\"language-bash\">dn: ou=it,dc=sys,dc=com\nou: it\nobjectClass: organizationalUnit\n\ndn: cn=test1,ou=it,dc=sys,dc=com\nou: it\ncn: test1\nsn: t1\nobjectClass: inetOrgPerson\nobjectClass: organizationalPerson<\/code><\/pre>\n<h4>\u63d2\u5165\u6570\u636e\u5e93<\/h4>\n<pre><code class=\"language-bash\"># ldapadd -x -D &quot;cn=admin,dc=sys,dc=com&quot; -W -f test1.ldif<\/code><\/pre>\n<p>\u53ef\u4ee5\u770b\u5230\u5df2\u7ecf\u5458\u5de5\u8d26\u53f7\u52a0\u5165\u5230ldap\u4e2d\uff1a<\/p>\n<pre><code class=\"language-bash\"># ldapadd -x -D &quot;cn=admin,dc=sys,dc=com&quot; -W -f test1.ldif\nEnter LDAP Password: \nadding new entry &quot;ou=it,dc=sys,dc=com&quot;\n\nadding new entry &quot;cn=test1,ou=it,dc=sys,dc=com&quot;<\/code><\/pre>\n<h4>\u9a8c\u8bc1<\/h4>\n<pre><code class=\"language-bash\"># ldapsearch -x -b &#039;dc=sys,dc=com&#039; &#039;(objectClass=*)&#039;<\/code><\/pre>\n<pre><code class=\"language-bash\"># extended LDIF\n#\n# LDAPv3\n# base &lt;dc=sys,dc=com&gt; with scope subtree\n# filter: (objectClass=*)\n# requesting: ALL\n#\n\n# sys.com\ndn: dc=sys,dc=com\nobjectClass: dcObject\nobjectClass: organization\no: SYS.Inc\ndc: sys\n\n# admin, sys.com\ndn: cn=admin,dc=sys,dc=com\nobjectClass: organizationalRole\ncn: admin\n\n# it, sys.com\ndn: ou=it,dc=sys,dc=com\nou: it\nobjectClass: organizationalUnit\n\n# test1, it, sys.com\ndn: cn=test1,ou=it,dc=sys,dc=com\nou: it\ncn: test1\nsn: t1\nobjectClass: inetOrgPerson\nobjectClass: organizationalPerson\n\n# search result\nsearch: 2\nresult: 0 Success\n\n# numResponses: 5\n# numEntries: 4<\/code><\/pre>\n<h2>\u9644\u5f55<\/h2>\n<h3>\u5e38\u89c1\u5bf9\u8c61\u5c5e\u6027<\/h3>\n<p>LDAP\u4e3a\u4eba\u5458\u7ec4\u7ec7\u673a\u6784\u4e2d\u5e38\u89c1\u7684\u5bf9\u8c61\u90fd\u8bbe\u8ba1\u4e86\u5c5e\u6027(\u6bd4\u5982commonName\uff0csurname)\u3002\u4e0b\u9762\u6709\u4e00\u4e9b\u5e38\u7528\u7684\u522b\u540d\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th style=\"text-align: left;\">\u5c5e\u6027\u540d\u79f0<\/th>\n<th style=\"text-align: left;\">\u5c5e\u6027\u522b\u540d<\/th>\n<th style=\"text-align: left;\">\u8bed\u6cd5<\/th>\n<th style=\"text-align: left;\">\u63cf\u8ff0<\/th>\n<th style=\"text-align: left;\">\u503c\uff08\u4e3e\u4f8b\uff09<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"text-align: left;\"><code>commonName<\/code><\/td>\n<td style=\"text-align: left;\"><code>cn<\/code><\/td>\n<td style=\"text-align: left;\">Directory String<\/td>\n<td style=\"text-align: left;\">\u540d\u5b57<\/td>\n<td style=\"text-align: left;\">Joe<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><code>surname<\/code><\/td>\n<td style=\"text-align: left;\"><code>sn<\/code><\/td>\n<td style=\"text-align: left;\">Directory String<\/td>\n<td style=\"text-align: left;\">\u59d3\u6c0f<\/td>\n<td style=\"text-align: left;\">Ye<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><code>organizationalUnitName<\/code><\/td>\n<td style=\"text-align: left;\"><code>ou<\/code><\/td>\n<td style=\"text-align: left;\">Directory String<\/td>\n<td style=\"text-align: left;\">\u5355\u4f4d\uff08\u90e8\u95e8\uff09\u540d\u79f0<\/td>\n<td style=\"text-align: left;\">IT_SECTION<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><code>organization<\/code><\/td>\n<td style=\"text-align: left;\"><code>o<\/code><\/td>\n<td style=\"text-align: left;\">Directory String<\/td>\n<td style=\"text-align: left;\">\u7ec4\u7ec7\uff08\u516c\u53f8\uff09\u540d\u79f0<\/td>\n<td style=\"text-align: left;\">appblog.cn<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><code>telephoneNumber<\/code><\/td>\n<td style=\"text-align: left;\"><\/td>\n<td style=\"text-align: left;\">Telephone Number<\/td>\n<td style=\"text-align: left;\">\u7535\u8bdd\u53f7\u7801<\/td>\n<td style=\"text-align: left;\">911<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><code>objectClass<\/code><\/td>\n<td style=\"text-align: left;\"><\/td>\n<td style=\"text-align: left;\"><\/td>\n<td style=\"text-align: left;\">\u5185\u7f6e\u5c5e\u6027<\/td>\n<td style=\"text-align: left;\">organizationa<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p>\u8f6f\u4ef6\u83b7\u53d6 OpenLDAP OpenLDAP\u5b98\u7f51\u4e0b\u8f7d\uff1ahttp:\/\/www.openldap.org\/soft [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[414],"class_list":["post-1657","post","type-post","status-publish","format-standard","hentry","category-devops-base","tag-openldap"],"_links":{"self":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts\/1657","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/comments?post=1657"}],"version-history":[{"count":0,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts\/1657\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/media?parent=1657"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/categories?post=1657"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/tags?post=1657"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}