Openldap Notes

2 daemons:
1) slapd (open ldap server) - client requests and directory management
2) slurpd - replicating changes to other directories (deprecated).
slapd - 1 main configuration file: slapd.conf
Create a database directory
[root@tl]# mkdir /var/lib/ldap/mydomain.net
[root@tl]# chown ldap:ldap /var/lib/ldap/mydomain.net
Create a password:
[root@tl]# slappasswd
New password:
Re-enter new password:
{SSHA}rjaZyxwzVledSnQGrSdtPJlXTHNAh/7D
Update the /etc/openldap/slapd.conf file:
database
bdb
suffix
"dc=mydomain,dc=net"
checkpoint
1024 15
rootdn
"cn=Manager,dc=mydomain,dc=net"
rootpw {SSHA}rjaZyxwzVledSnQGrSdtPJlXTHNAh/7D
directory
/var/lib/ldap
Create LDAP Database
[root@tl tmp]# wget http://www.padl.com/download/MigrationTools.tgz
--2009-07-03 10:59:19-- http://www.padl.com/download/MigrationTools.tgz
Resolving www.padl.com... 216.154.215.154
Connecting to www.padl.com|216.154.215.154|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 21284 (21K) [application/x-gzip]
Saving to: `MigrationTools.tgz'
100%[=======================================>] 21,284

106K/s

in 0.2s

2009-07-03 10:59:19 (106 KB/s) - `MigrationTools.tgz' saved [21284/21284]

[root@tl tmp]# tar -xvzf MigrationTools.tgz
MigrationTools-47/
MigrationTools-47/ads/
.
.
[root@tl tmp]# mkdir -p /usr/share/openldap/migration/
[root@tl tmp]# cd MigrationTools*
[root@tl MigrationTools-47]# cp -rv * /usr/share/openldap/migration/
`ads' -> `/usr/share/openldap/migration/ads'
.
.
The password conversion script is named migrate_common.ph (in
/usr/share/openldap/migration).
Edit the file and replace all instances of the string .padl. with the
string .mydomain.

Padl is the website used by some of the LDAP development team.

Need Domain to be .mydomain. instead so it matches our /etc/openldap/slpd.conf
file.
The migrate_common.ph file will be used later by the migration script.
Copy DB_CONFIG to /var/lib/ldap/
[root@tl]# updatedb
[root@tl]# locate DB_CONFIG
/usr/share/doc/openldap-servers-2.4.16/DB_CONFIG.example
[root@tl]# cp /usr/share/doc/openldap-servers-2.4.19/DB_CONFIG.example
/var/lib/ldap/DB_CONFIG
make sure everything in /var/lib/ldap is owned by ldap:
cd /var/lib/
chown -R ldap:ldap ldap