| 626 | | 7. Make sure you can access the service with admin credentials: |
| | 626 | 7. Without the pid file, the start/stop script fail to start/stop the daemon. This can be resolved by editing the /etc/init.d/slapd file and search for the function start_slapd(). Add this to the last line of that function before it exits: |
| | 627 | |
| | 628 | pidof /usr/sbin/slapd > "$SLAPD_PIDFILE" |
| | 629 | |
| | 630 | 8. Make sure it is running by checking that ldap server is listening on both ports: |
| | 631 | |
| | 632 | netstat -an | grep 389 |
| | 633 | netstat -an | grep 636 |
| | 634 | |
| | 635 | 9. Stop the service: |
| | 636 | {{{ |
| | 637 | /etc/init.d/slapd stop |
| | 638 | }}} |
| | 639 | |
| | 640 | 10. Import initial content (first group and account that will be used as administrators for the login service): This is a brief reasoning behind the entries in the ldif file. Please change the file as per your organizational needs. |
| | 641 | Each organizational unit(ou) has a PI who is the admin for the OU and a group which has all the accounts for the OU. So that is why your first organization and first acount have to conform to such a structure. |
| | 642 | |
| | 643 | OU admin can only manage accounts for that organization. |
| | 644 | Any person that is a member of sysadmin group in LDAP and admin group in login.yaml will be able to use ControlPanel of the ogs_login service to manage ALL accounts. |
| | 645 | |
| | 646 | 11. Run the following commands. |
| | 647 | {{{ |
| | 648 | cp /usr/share/slapd/DB_CONFIG /var/lib/ldap/ |
| | 649 | slapadd -l init.ldif -f /etc/ldap/slapd.conf |
| | 650 | chown openldap:openldap /var/lib/ldap/* |
| | 651 | }}} |
| | 652 | |
| | 653 | 12. Start the service: |
| | 654 | {{{ |
| | 655 | /etc/init.d/slapd start |
| | 656 | }}} |
| | 657 | |
| | 658 | 13. Make sure you can access the service with admin credentials: |