Let’s do it.

0. What you need

Installing OpenLDAP on Ubuntu 18.04 is not a really complicated matter, however, it is necessary to have a basic knowledge about the use of the terminal.

Also, your user needs to be able to execute commands with sudo because some commands require root.

With this in mind, you can start the installation without problems.

1. Upgrade the system

In the first place, you need to upgrade the system. It is recommended to get the latest security patches on your system.

:~$ sudo apt update && sudo apt upgrade

Now, you can continue.

2. Set the hostname

The first step is to define the hostname. Run this command:

:~$ sudo hostnamectl set-hostname ldap.osradar.local

And add it to your /etc/hosts file

:~$ echo "192.168.250.6 ldap.osradar.com" | sudo tee -a /etc/hosts

3. Install OpenLDAP

A great advantage of OpenLDAP is that its packages are in the official Ubuntu repositories, which makes installation easy. Just write the following.

:~$ sudo apt install slapd ldap-utils

After downloading the package and during installation you will have to define and confirm the root password.

If you wish to verify that the installation has been carried out effectively. You can use the following command:

:~$ sudo slapcat

As you can see in the image above, OpenLDAP is installed correctly.

4. Add base dn for Users and Groups

it is now necessary to configure OpenLDAP. To do this, the first step is to add to base DN for users and groups.

Create a file called basedn.ldif in your home folder or wherever you want.

:~$ nano basedn.ldif

And add the following:

dn: ou=people,dc=example,dc=com
objectClass: organizationalUnit
ou: people

dn: ou=groups,dc=example,dc=com
objectClass: organizationalUnit
ou: groups

Of course, replace example and com, for your domain properties.

Next, add the configuration file. Run:

:~$ ldapadd -x -D cn=admin,dc=osradar,dc=local -W -f basedn.ldif

Next, install phpLDAPadmin.

5. Install phpLDAPadmin

In order to manage OpenLDAP in a quick and easy way is that you have to install phpLDAPadmin. Let’s do it.

First, install some necessary packages. Among them are Apache web server and PHP.

:~$ sudo apt install apache2 php php-cgi libapache2-mod-php php-mbstring php-common php-pear

Next, it is necessary to enable the php7.2-cgi extension. Then, restart Apache service.

:~$ sudo a2enconf php7.2-cgi
:~$ sudo systemctl reload apache2

Then install phpLDAPadmin.

:~$ sudo apt install phpldapadmin

The next step is to modify the permissions in the phpLDAPadmin configuration file to receive requests from network members.

:~$ sudo nano /etc/apache2/conf-enabled/phpldapadmin.conf

And leave it as I show you in the picture.

With this, we are simply telling phpLDAPadmin to accept requests from network members.

Then, restart Apache.

:~$ sudo systemctl restart apache2

If you use ufw, you must open ports 80 and 443.

:~$ sudo ufw allow 80
:~$ sudo ufw allow 443

Finally, open your favorite web browser and go to http://IP_SERVER_OR_DOMAIN/phpldapadmin

Next, log in.

Finally, you will see this.

And that’s it.

Conclusion

As you can see OpenLDAP is easy to install and configure in Ubuntu, it just remains that you can configure it to your needs.

Please share this article with friends.

The post How to install OpenLDAP on Ubuntu 18.04? appeared first on Linux Windows and android Tutorials.

One of those important applications that can be installed in CentOS 7, oriented to server management is OpenLDAP which is an open LDAP implementation that allows us to access an orderly and distributed directory service to search for diverse information in a network environment, ie a centralized way to store contact information in an organization.

OpenLDAP has four main components:

• slapd: autonomous LDAP daemon.
• slurpd: standalone LDAP update replication daemon.
• LDAP protocol support library routines
• Utilities tools and customers.

In this tutorial we will install OpenLDAP in cents 7.

Let’s get to work

1.- Upgrading the system and installing openldap packages

As always, the first thing to do is to update the system.

:~# yum update

Now we proceed to install the OpenLDAP packages.

:~# yum install openldap compat-openldap openldap-clients openldap-servers openldap-servers-sql openldap-devel

Once the packages have been installed, we must enable and initialize the openLDAP service.

:~# systemctl enable slapd
:~# systemctl start slapd

2.- Configuring openLDAP server

First we must generate the OpenLDAP root password. That’s why we write:

:~# slappasswd -h {SSHA} -s your_password

and we’ll get something like this:

:~# {SSHA}XKrTsGmjsV0Rw1lZzLaOr7pqvZRrbv8A

Next, create the openLDAP configuration file so that it can work correctly. We write:

:~# nano conf.ldif

And we place the following content:

dn: olcDatabase={2}hdb,cn=config
changetype: modify
replace: olcSuffix
olcSuffix: dc=osradar,dc=local

dn: olcDatabase={2}hdb,cn=config
changetype: modify
replace: olcRootDN
olcRootDN: cn=angelo,dc=osradar,dc=local

dn: olcDatabase={2}hdb,cn=config
changetype: modify
replace: olcRootPW
olcRootPW: {SSHA}XKrTsGmjsV0Rw1lZzLaOr7pqvZRrbv8A

From that file you must modify these three parameters at your convenience:

• olcSuffix: Basically the suffix is your hostname. For your reference, in this tutorial the hostname is osradar.local
• olcRootDN: This refers to the openLDAP administrator user.
• olcRootPW: Here is the password generated above. Put yours up.

when we finish editing the file, we proceed to “upload” the configuration created to openLDAP with ldapmodify.

:~# ldapmodify -Y EXTERNAL -H ldapi:/// -f conf.ldif

3.- Configuring the openLDAP Database

Now we proceed to copy the example database and grant it permissions.

:~# cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG
:~# chown ldap:ldap /var/lib/ldap/*

And we add the rest of the schemas.

:~# ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/cosine.ldif
:~# ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/nis.ldif
:~# ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/inetorgperson.ldif

Now we create our file named base.ldif

:~# nano base.ldif

And within this we add the following:

dn: dc=osradar,dc=local
dc: osradar
objectClass: top
objectClass: domain

dn: cn=angelo ,dc=osradar,dc=local
objectClass: organizationalRole
cn: angelo
description: LDAP Manager

dn: ou=users,dc=osradar,dc=local
objectClass: organizationalUnit
ou: Users

dn: ou=Group,dc=osradar,dc=local
objectClass: organizationalUnit
ou: Group

Now we must write the command to create the directory structure. In doing so we will be asked for the openldap password.

:~# ldapadd -x -W -D "cn=angelo,dc=osradar,dc=local" -f base.ldif

Of course, change the parameters to your own.

4.-Creating openLDAP User

now we proceed to create a user for openLDAP. An easy way to do this is to create a file for the new user, I’ll call it newuser.ldif.

:~# nano newuser.ldif

And in it we will copy the following content:

dn: uid=user,ou=users,dc=osradar,dc=local
objectClass: top
objectClass: account
objectClass: posixAccount
objectClass: shadowAccount
cn: user
uid: user
uidNumber: 9999
gidNumber: 100
homeDirectory: /home/user
loginShell: /bin/bash
gecos: user
userPassword: {crypt}x
shadowLastChange: 17058
shadowMin: 0
shadowMax: 99999
shadowWarning: 7

change what you have to change.

Now with the ldapadd command we proceed to create the new user.

:~# ldapadd -x -W -D "cn=angelo,dc=osradar,dc=local" -f newuser.ldif

Now we are going to give the new user a password.

:~# ldappasswd -s pass321 -W -D "cn=angelo,dc=osradar,dc=local" -x "uid=user,ou=users,dc=osradar,dc=local"

5.- Finals configurations

We then proceed to add the rules in the firewall so that openLDAP runs smoothly.

:~# firewall-cmd --permanent --add-service=ldap
:~# firewall-cmd --reload

6.- Testing the server

We verify that everything is in order:

:~# ldapsearch -x cn=user -b dc=osradar,dc=local

If the terminal displays the user information, then everything went well.

And that’s it, we have our OpenLDAP server up and running. We would only have to go and configure each client so that it can be logged into the server. This will depend on each GNU/LINUX distribution the client has.

Please share this article through your social networks.

The post How to install OpenLDAP on CentOS 7 appeared first on Linux Windows and android Tutorials.

To simplify the administration of the system users, it is ideal to use a database accessible via LDAP. Centrally storing user accounts in a single repository makes it easy to create, modify, and delete user accounts and user groups

Let’s get to work!!!

Installing OpenLDAP server

To install the openLDAP server we only need to execute the following command with root privileges:

             sudo apt install slapd ldap-utils

When the installation is complete, you have to define the administrator password.

We will check the status of the service to see if the installation was successful.

sudo systemctl status slapd.service

In the previous image we see that the installation was successful and that the service is running.

2.-Basic configuration of the service

When the installation of the packages is finished it does not do so with an appropriate configuration, so we must use dpkg to do it, at least in a basic way.

            sudo dpkg-reconfigure slapd

When you run the above command, you will be asked certain questions. The first is whether we want to skip the LDAP server configuration. We say NO.

The next step is to enter your domain.

You will then ask us for the name of our organization

After that, you will be asked to set the admin password again.

The next step is to define the database backend. We will choose MDB because it is the most efficient in performance and memory consumption.

Do you want the database to be removed when slapd is purged? We say No.

Move old database? we say Yes

We finally got out of the configuration script

3.-Define Configuration in an LDAP Client

The configuration file for all OpenLDAP clients is ldap.conf located in /etc/ldap. We need to edit it.

            sudo nano /etc/ldap/ldap.conf

When we open the file we’ll see something like this:

In this file we only need to specify two things: BASE and URI. BASE is where our DNS is placed, following this formula:

BASE dc=YOUR_DOMAIN,dc=com

Or if you have, a subdomain:

BASE dc=SUB_DOMAIN,dc=YOUR_DOMAIN,dc=com

While URI is the address where the LDAP server is located:

If the server is hosted on the same machine as the client, then we must set the URI to ldap:localhost/

Let’s check that everything is OK, with the execution of the next command:

            ldapsearch -x

The previous image shows the output per terminal of the execution of the ldapsearch command. Seeing 0 success means that everything is in order.

Optional: Install phpLDAPAdmin

It is possible to manage ldap from the command line, but some people prefer a graphical application. PhpLDAPAdmin is a web application used to manage an LDAP server in a simple and intuitive way.

            sudo apt install phpldapadmin

note:phpldapadmin requires a web server to run since it is a browser-based application, if your ubuntu does not have a web server, then the above command will install apache as a dependency.

After installation, we should be able to run phpldapadmin from the browser, but first we’ll modify some things from the configuration files.

            sudo nano /etc/phpldapadmin/config.php

First we will tell phpldapadmin that we will connect from localhost. We’ll go to line 293. Press CTR + _ and write the line number.

Then we go to line 296 and remove the comment to allow the connection through port 389.

Next we will go to line 300 where we will find :

$servers->setValue(‘server’,’base’,array(‘dc=example,dc=com’))

And the substitutes for the following:

$servers->setValue(‘server’,’base’,array());

This is in order for phpldapadmin to recognize the domain arrangement we use in the openLDAP configuration.

On line 335 we proceed to remove the comment and enable TLS.

Finally we disable the anonymous logging. Let’s go to line 453.

We finally got out and finished setting up.

And with this we can access from our browser to phpldapadmin

We enter our credentials and log in

And we will see the following

And this is it. We have installed and configured openLDAP. Now it’s time to take advantage of this fabulous application.

Feel free to share this article with your friends through social networks.

The post How to Install OpenLDAP Server on Ubuntu 18.04? appeared first on Linux Windows and android Tutorials.