Changes between Version 47 and Version 48 of Old/hNodes/cNodeVer3/dAssembly/e4NodesSetup

Timestamp:

Jun 21, 2013, 9:03:01 PM (12 years ago)

Author:

ParviK

Comment:

—

Old/hNodes/cNodeVer3/dAssembly/e4NodesSetup

@@ -246 +246 @@
 ====== Setting up Login Service ======
 ''' Setting up LDAP client '''
+
 NOTE: EVERYTHING THAT IS ORBIT-LAB.ORG SHOULD BE GENI.NET
 1. Install ldap libraries using command 
@@ -324 +325 @@
 
 }}}
+
+''' Setting up LDAP server '''
+
+Decide on the organizational structure for ldap:
+{{{
+    orbit-lab.org => dc=orbit-lab,dc=org
+}}}
+Install the server and utilities:
+{{{
+apt-get install slapd ldap-utils phpldapadmin
+}}}
+Modify the /etc/default/slapd file and edit the SLAPD_CONF and SLAPD_PIDFILE values to
+{{{
+   SLAPD_CONF="/etc/ldap/slapd.conf"
+   SLAPD_PIDFILE="/var/run/slapd/slapd.pid"
+}}}
+This is our slapd.conf file, please change it according to your organization
+
+{{{
+   allow bind_v2
+   include /etc/ldap/schema/core.schema
+   include /etc/ldap/schema/cosine.schema
+   include /etc/ldap/schema/nis.schema
+   include /etc/ldap/schema/inetorgperson.schema
+   include /etc/ldap/schema/ldapns.schema
+   include /etc/ldap/schema/openssh-lpk_openldap.schema
+
+   oglevel 256
+   modulepath      /usr/lib/ldap
+   moduleload      back_bdb
+
+   backend bdb
+   database bdb
+   index objectclass,entryCSN,entryUUID eq
+   suffix "dc=orbit-lab,dc=org"
+   rootdn "dc=orbit-lab,dc=org"
+   directory "/var/lib/ldap"
+   access to dn.base="" by * read
+   access to * by dn.regex="cn=admin,dc=orbit,dc=lab,dc=org" write by * read
+   access to attrs=userPassword by dn.regex="cn=admin,dc=orbit-lab,dc=org" write by anonymous auth by self write by * none
+}}}
+You can download openssh-lpk_openldap.schema from ​ http://code.google.com/p/openssh-lpk/downloads/detail?name=openssh-lpk_openldap.schema
+
+Set sizelimit to 10000 by editing slapd.conf file
+{{{
+   sizelimit 10000
+}}}
+Start the service:
+{{{
+   /etc/init.d/slapd start
+}}}
+
+/etc/init.d/slapd start
+
+make sure you can access the service with admin credentials:
+{{{
+   ldapsearch -x   -b "dc=orbit-lab,dc=org"  "objectClass=organizationalRole"
+   ldapsearch -x   -b "dc=orbit-lab,dc=org"  "objectClass=organizationalUnit"
+   ldapsearch -x   -b "dc=orbit-lab,dc=org"  "objectclass=organizationalUnit"
+   ldapsearch -x   -b "dc=orbit-lab,dc=org"  "objectClass=posixGroup"
+   ldapsearch -x localhost -D "cn=admin,dc=orbit-=lab,dc=org" -W -b "dc=orbit-lab,dc=org" uid=*
+}}}