Article View: fj.net.ldap
Article #51Configuration LDAP
From: adg
Date: Mon, 28 May 2001 13:02
Date: Mon, 28 May 2001 13:02
180 lines
6155 bytes
6155 bytes
This is a multi-part message in MIME format.
--------------531FAB4C05AE83BDA0FBCBB8
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Bonjour,
les questions que je vais vous poser sont sans doute des questions de
d�butants, aussi, je comprendrais si jamais vous ne me r�pondez pas.
J'utilise un annuaire OpenLDAP sous linux dont la configuration est dans
les
fichiers ci-joints.
Je souhaiterais dans un premier temps faire uniquement des tests
distants (�
partir de Netscape ou Outlook sur d'autres machines) cependant, le
protocole
d'authentification SASL me rebute syst�matiquement, et je ne peux ainsi
pas
acc�der � l'annuaire LDAP en bind_simple (� distance, car je ne connais
pas
la syntaxe pour l'URL), et je ne peux y acc�der non plus en ligne de
commande sans activer l'option '-x' de ldapsearch.
J'aimerais donc s'il vous est possible de m'aiguiller pouvoir d�sactiver
au
moins temporairement SASL, (j'ai pourtant essay� comme en t�moigne les
fichiers de configuration ci-joints) pour pouvoir faire mes tests, ou
alors,
si vous pouvez m'indiquer pr�cis�ment comment m'authentifier en tant que
root en lgne de commande ou en tant qu'utilisateur.
Ma deuxi�me question porte plut�t surtout sur l'acc�s au serveur LDAP �
distance par l'interm�diaire d'un nom (pas d'une adresse IP).
Je vous remercie de l'attention que vous avez port� � ce mail.
Merci d'avance.
--------------531FAB4C05AE83BDA0FBCBB8
Content-Type: text/plain; charset=us-ascii;
name="commandes.txt"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="commandes.txt"
slapd -f /etc/openldap.slapd.conf
slapadd -l /.....
ldapsearch -M -b "dc=tech,dc=fr" -h "STEINBECK" -x "(objectclass=*)"
URL dans Netscape: ldap://128.1.5.20:389/??base?objectclass=*
--------------531FAB4C05AE83BDA0FBCBB8
Content-Type: text/plain; charset=us-ascii;
name="ldap.conf"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="ldap.conf"
# $OpenLDAP: pkg/ldap/libraries/libldap/ldap.conf,v 1.4.8.6 2000/09/05 17:54:38 kurt Exp $
#
# LDAP Defaults
#
# See ldap.conf(5) for details
# This file should be world readable but not world writable.
BASE dc=tech, dc=fr
URI ldap://ldap.tech.fr ldap://root.tech.fr:666
#URI ldap://ldap.example.com ldap://ldap-master.example.com:666
BINDDN ldap://ldap.tech.fr:389/
#SIZELIMIT 12
#TIMELIMIT 15
#DEREF never
sasl-secprops maxssf=0
--------------531FAB4C05AE83BDA0FBCBB8
Content-Type: text/plain; charset=us-ascii;
name="slapd.conf"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="slapd.conf"
# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.4 2000/08/26 17:06:18 kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /etc/openldap/schema/core.schema
#referral ldap://root.tech.fr
defaultaccess search read
access to * by * read
by * search
# Define global ACLs to disable default read access.
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org
pidfile /var/run/slapd.pid
argsfile /var/run/slapd.args
# Load dynamic backend modules:
# modulepath /usr/sbin/openldap
# moduleload back_ldap.la
# moduleload back_ldbm.la
# moduleload back_passwd.la
# moduleload back_shell.la
security sasl=0 ssf=0 transport=0 tls=0
sasl-secprops maxssf=0 minssf=0
#allow tls_2_anon,bind_simple
#disallow tls_authc bind_krbv4
#######################################################################
# ldbm database definitions
#######################################################################
database ldbm
suffix "dc=tech, dc=fr"
#suffix "o=My Organization Name, c=US"
rootdn "cn=Manager, dc=tech, dc=fr"
#rootdn "cn=Manager, o=My Organization Name, c=US"
# Cleartext passwords, especially for the rootdn, should
# be avoid. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw secret
# The database directory MUST exist prior to running slapd AND
# should only be accessable by the slapd/tools. Mode 700 recommended.
directory /var/lib/ldap/
# Indices to maintain
#access to * by * read
index default pres,eq
index objectClass,uid
#index cn,sn eq,sub,approx
access to dn="roger2313,dc=tech,dc=fr" by * read
by * search
by * write
access to * by * write
by * read
by * search
--------------531FAB4C05AE83BDA0FBCBB8
Content-Type: text/plain; charset=us-ascii;
name="sortie.txt"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="sortie.txt"
version: 2
#
# filter: (objectclass=*)
# requesting: ALL
#
# toto,dc=tech,dc=fr
dn: dc=toto,dc=tech,dc=fr
cn: toto
sn: est content
objectClass: top
objectClass: person
# toto2,dc=tech,dc=fr
dn: dc=toto2,dc=tech,dc=fr
cn: toto2
sn: est content
objectClass: top
objectClass: person
# search result
search: 2
result: 0 Success
# numResponses: 3
# numEntries: 2
--------------531FAB4C05AE83BDA0FBCBB8--
Technical Details
Message-ID:
<3B124C78.82E5E800@pronet.fr>Path:
arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!oleane.net!oleane!isdnet!isdnethub!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: FRENCH,ASCII X-Google-Thread: 103627,a8f6069add82772a,start X-Google-Attributes: gid103627,public X-Google-ArrivalTime: 2001-05-28 06:00:02 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!oleane.net!oleane!isdnet!isdnethub!not-for-mail From: adg <adrien.degraeve@pronet.fr> Newsgroups: fj.net.ldap Subject: Configuration LDAP Date: Mon, 28 May 2001 15:02:48 +0200 Lines: 181 Message-ID: <3B124C78.82E5E800@pronet.fr> NNTP-Posting-Host: 195.154.28.137 Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="------------531FAB4C05AE83BDA0FBCBB8" X-Trace: news2.isdnet.net 991054681 16848 195.154.28.137 (28 May 2001 12:58:01 GMT) X-Complaints-To: abuse@isdnet.net NNTP-Posting-Date: 28 May 2001 12:58:01 GMT X-Mailer: Mozilla 4.73 [en] (Win98; I) X-Accept-Language: en