🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: fj.net.ldap
Article #51

Configuration LDAP

#51
From: adg
Date: Mon, 28 May 2001 13:02
180 lines
6155 bytes
This is a multi-part message in MIME format.
--------------531FAB4C05AE83BDA0FBCBB8
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

Bonjour,
les questions que je vais vous poser sont sans doute des questions de
d�butants, aussi, je comprendrais si jamais vous ne me r�pondez pas.

J'utilise un annuaire OpenLDAP sous linux dont la configuration est dans
les
fichiers ci-joints.
Je souhaiterais dans un premier temps faire uniquement des tests
distants (�
partir de Netscape ou Outlook sur d'autres machines) cependant, le
protocole
d'authentification SASL me rebute syst�matiquement, et je ne peux ainsi
pas
acc�der � l'annuaire LDAP en bind_simple (� distance, car je ne connais
pas
la syntaxe pour l'URL), et je ne peux y acc�der non plus en ligne de
commande sans activer l'option '-x' de ldapsearch.
J'aimerais donc s'il vous est possible de m'aiguiller pouvoir d�sactiver
au
moins temporairement SASL, (j'ai pourtant essay� comme en t�moigne les
fichiers de configuration ci-joints) pour pouvoir faire mes tests, ou
alors,
si vous pouvez m'indiquer pr�cis�ment comment m'authentifier en tant que

root en lgne de commande ou en tant qu'utilisateur.

Ma deuxi�me question porte plut�t surtout sur l'acc�s au serveur LDAP �
distance par l'interm�diaire d'un nom (pas d'une adresse IP).

Je vous remercie de l'attention que vous avez port� � ce mail.
Merci d'avance.


--------------531FAB4C05AE83BDA0FBCBB8
Content-Type: text/plain; charset=us-ascii;
 name="commandes.txt"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="commandes.txt"

slapd -f /etc/openldap.slapd.conf
slapadd -l /.....
ldapsearch -M -b "dc=tech,dc=fr" -h "STEINBECK" -x "(objectclass=*)"
URL dans Netscape: ldap://128.1.5.20:389/??base?objectclass=*
--------------531FAB4C05AE83BDA0FBCBB8
Content-Type: text/plain; charset=us-ascii;
 name="ldap.conf"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="ldap.conf"

# $OpenLDAP: pkg/ldap/libraries/libldap/ldap.conf,v 1.4.8.6 2000/09/05 17:54:38 kurt Exp $
#
# LDAP Defaults
#

# See ldap.conf(5) for details
# This file should be world readable but not world writable.

BASE	dc=tech, dc=fr
URI	ldap://ldap.tech.fr ldap://root.tech.fr:666
#URI	ldap://ldap.example.com ldap://ldap-master.example.com:666
BINDDN ldap://ldap.tech.fr:389/
#SIZELIMIT	12
#TIMELIMIT	15
#DEREF		never

sasl-secprops maxssf=0


--------------531FAB4C05AE83BDA0FBCBB8
Content-Type: text/plain; charset=us-ascii;
 name="slapd.conf"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="slapd.conf"

# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.4 2000/08/26 17:06:18 kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /etc/openldap/schema/core.schema
#referral ldap://root.tech.fr
defaultaccess search read
access to * by * read
	    by * search

# Define global ACLs to disable default read access.

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral	ldap://root.openldap.org

pidfile		/var/run/slapd.pid
argsfile	/var/run/slapd.args


# Load dynamic backend modules:
# modulepath	/usr/sbin/openldap
# moduleload	back_ldap.la
# moduleload	back_ldbm.la
# moduleload	back_passwd.la
# moduleload	back_shell.la

security sasl=0 ssf=0 transport=0 tls=0
sasl-secprops maxssf=0 minssf=0
#allow tls_2_anon,bind_simple
#disallow tls_authc bind_krbv4

#######################################################################
# ldbm database definitions
#######################################################################

database	ldbm
suffix		"dc=tech, dc=fr"
#suffix		"o=My Organization Name, c=US"
rootdn		"cn=Manager, dc=tech, dc=fr"
#rootdn		"cn=Manager, o=My Organization Name, c=US"
# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw		secret
# The database directory MUST exist prior to running slapd AND 
# should only be accessable by the slapd/tools. Mode 700 recommended.
directory	/var/lib/ldap/
# Indices to maintain
#access to * by * read
index default pres,eq
index objectClass,uid
#index cn,sn eq,sub,approx
access to dn="roger2313,dc=tech,dc=fr" by *  read
				          by * search
				          by * write
access to * by * write
                 by * read
                 by * search


--------------531FAB4C05AE83BDA0FBCBB8
Content-Type: text/plain; charset=us-ascii;
 name="sortie.txt"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="sortie.txt"

version: 2

#
# filter: (objectclass=*)
# requesting: ALL
#

# toto,dc=tech,dc=fr
dn: dc=toto,dc=tech,dc=fr
cn: toto
sn: est content
objectClass: top
objectClass: person

# toto2,dc=tech,dc=fr
dn: dc=toto2,dc=tech,dc=fr
cn: toto2
sn: est content
objectClass: top
objectClass: person

# search result
search: 2
result: 0 Success

# numResponses: 3
# numEntries: 2

--------------531FAB4C05AE83BDA0FBCBB8--
Technical Details
Message-ID: <3B124C78.82E5E800@pronet.fr>
Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!oleane.net!oleane!isdnet!isdnethub!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: FRENCH,ASCII
X-Google-Thread: 103627,a8f6069add82772a,start
X-Google-Attributes: gid103627,public
X-Google-ArrivalTime: 2001-05-28 06:00:02 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!oleane.net!oleane!isdnet!isdnethub!not-for-mail
From: adg <adrien.degraeve@pronet.fr>
Newsgroups: fj.net.ldap
Subject: Configuration LDAP
Date: Mon, 28 May 2001 15:02:48 +0200
Lines: 181
Message-ID: <3B124C78.82E5E800@pronet.fr>
NNTP-Posting-Host: 195.154.28.137
Mime-Version: 1.0
Content-Type: multipart/mixed;
 boundary="------------531FAB4C05AE83BDA0FBCBB8"
X-Trace: news2.isdnet.net 991054681 16848 195.154.28.137 (28 May 2001 12:58:01 GMT)
X-Complaints-To: abuse@isdnet.net
NNTP-Posting-Date: 28 May 2001 12:58:01 GMT
X-Mailer: Mozilla 4.73 [en] (Win98; I)
X-Accept-Language: en