First you need to have installed BerkeleyDB as the data-store for OpenLDAP. You can Download BerkeleyDB from
http://www.oracle.com/technetwork/products/berkeleydb/downloads/index.html
Also make sure that you need g++ and all the essential dependencies installed in your machine. If you are using ubuntu
$sudo apt-get install build-essential will install all the dependencies.
Here I have used BDB 4.8.30 version.
1. Create a directory for BDB installation
mkdir /home/chamara/OpenLDAP/BerkeleyDB
2. Unzip the BerkeleyDB distribution
tar -xvf db-4.8.30.tar.gz
3. Go to the directory
/db-4.8.30/build_unix
4. Run the following command
/build_unix$ ../dist/configure --prefix=/home/chamara/OpenLDAP/BerkeleyDB
--prefix will set the final BDB installation path. There are lots of parameters which can be set at the installation. For a complete reference please refer the BDB documentation.
5. Finally you will get the following output in the end of configure
configure: creating ./config.status
config.status: creating Makefile
config.status: creating db_cxx.h
config.status: creating db_int.h
config.status: creating clib_port.h
config.status: creating include.tcl
config.status: creating db.h
config.status: creating db_config.h
config.status: executing libtool commands
Also if you see the current directory there will be a make file created
-rw-r--r-- 1 chamara chamara 81K 2012-05-05 05:37 Makefile
So that now you can work on the installation by continuing the following procedure
$make
$make install
Now if you check the BerkeleyDB directory
/BerkeleyDB$ ls -lah
total 24K
drwxr-xr-x 6 chamara chamara 4.0K 2012-05-05 05:51 .
drwxr-xr-x 5 chamara chamara 4.0K 2012-05-05 05:36 ..
drwxr-xr-x 2 chamara chamara 4.0K 2012-05-05 05:51 bin
drwxr-xr-x 13 chamara chamara 4.0K 2012-05-05 05:51 docs
drwxr-xr-x 2 chamara chamara 4.0K 2012-05-05 05:51 include
drwxr-xr-x 2 chamara chamara 4.0K 2012-05-05 05:51 lib
6. Now you have to set the following parameters for OpenLDAP to find where the BerkeleyDB is installed
$CPPFLAGS="-I/home/chamara/OpenLDAP/BerkeleyDB/include"
$export CPPFLAGS
$LDFLAGS="-L/usr/local/lib -L/home/chamara/OpenLDAP/BerkeleyDB/lib -R/home/chamara/OpenLDAP/BerkeleyDB/lib"
$export LDFLAGS
$LD_LIBRARY_PATH="/home/chamara/OpenLDAP/BerkeleyDB/lib"
$export LD_LIBRARY_PATH
* Now BerkeleyDB is installed properly
7. Now you need to have a OpenLDAP distribution. You can download from
http://www.openldap.org/software/download/
I have used openldap-stable-20100719.tgz
Unzip the distribution
$ tar -xvf openldap-stable-20100719.tgz
Now go to the OpenLDAP distribution
$ cd openldap-2.4.23/
$ ls -alh
total 1.5M
drwxr-xr-x 10 chamara chamara 4.0K 2010-06-30 05:23 .
drwxr-xr-x 5 chamara chamara 4.0K 2012-05-05 05:36 ..
-rw-r--r-- 1 chamara chamara 244K 2005-10-30 03:37 aclocal.m4
-rw-r--r-- 1 chamara chamara 3.8K 2010-04-14 01:52 ANNOUNCEMENT
drwxr-xr-x 2 chamara chamara 4.0K 2012-05-05 05:36 build
-rw-r--r-- 1 chamara chamara 42K 2010-06-29 20:53 CHANGES
drwxr-xr-x 3 chamara chamara 4.0K 2012-05-05 05:36 clients
-rwxr-xr-x 1 chamara chamara 1.1M 2010-04-20 00:52 configure
-rw-r--r-- 1 chamara chamara 92K 2010-04-19 22:23 configure.in
drwxr-xr-x 7 chamara chamara 4.0K 2012-05-05 05:36 contrib
-rw-r--r-- 1 chamara chamara 2.3K 2010-04-14 01:52 COPYRIGHT
drwxr-xr-x 8 chamara chamara 4.0K 2012-05-05 05:36 doc
drwxr-xr-x 3 chamara chamara 4.0K 2012-05-05 05:36 include
-rw-r--r-- 1 chamara chamara 4.4K 2010-04-14 01:52 INSTALL
drwxr-xr-x 8 chamara chamara 4.0K 2012-05-05 05:36 libraries
-rw-r--r-- 1 chamara chamara 2.2K 2003-11-25 00:42 LICENSE
-rw-r--r-- 1 chamara chamara 1.1K 2010-04-14 01:52 Makefile.in
-rw-r--r-- 1 chamara chamara 3.5K 2010-04-14 01:52 README
drwxr-xr-x 3 chamara chamara 4.0K 2012-05-05 05:36 servers
drwxr-xr-x 5 chamara chamara 4.0K 2010-06-30 05:23 tests
8. Run the following command
$ ./configure --prefix=/home/chamara/OpenLDAP/OpenLDAP
again, as in BDB installation --prefix will set the final OpenLDAP installation path
9. Now you will see a MakeFile is created
-rw-r--r-- 1 chamara chamara 9.3K 2012-05-05 06:07 Makefile
So that, going through the following order you will have installed OpenLDAP
$ make depend
$ make
$ make test
$ make install
10. Now we are done with the OpenLDAP installation. If you check the destination directory
/OpenLDAP$ ls -lah
total 40K
drwxr-xr-x 10 chamara chamara 4.0K 2012-05-05 06:35 .
drwxr-xr-x 6 chamara chamara 4.0K 2012-05-05 06:06 ..
drwxr-xr-x 2 chamara chamara 4.0K 2012-05-05 06:35 bin
drwxr-xr-x 3 chamara chamara 4.0K 2012-05-05 06:35 etc
drwxr-xr-x 2 chamara chamara 4.0K 2012-05-05 06:35 include
drwxr-xr-x 2 chamara chamara 4.0K 2012-05-05 06:35 lib
drwxr-xr-x 2 chamara chamara 4.0K 2012-05-05 06:35 libexec
drwxr-xr-x 2 chamara chamara 4.0K 2012-05-05 06:35 sbin
drwxr-xr-x 3 chamara chamara 4.0K 2012-05-05 06:35 share
drwxr-xr-x 4 chamara chamara 4.0K 2012-05-05 06:35 var
Now we have to configure OpenLDAP installation. I will refer this directory as $OpenLDAP_HOME
11. change the directory to $OpenLDAP_HOME
12. Append the following in the etc/openldap/ldap.conf
BASE dc=test,dc=com
URI ldap://172.16.246.1:1389
You have to mention a valid ipaddress
12. Create DB_CONFIG file
$ cp etc/openldap/DB_CONFIG.example etc/openldap/DB_CONFIG
13. Now configure the etc/openldap/slapd.conf
Append following;
include /home/chamara/OpenLDAP/OpenLDAP/etc/openldap/schema/cosine.schema
include /home/chamara/OpenLDAP/OpenLDAP/etc/openldap/schema/nis.schema
include /home/chamara/OpenLDAP/OpenLDAP/etc/openldap/schema/inetorgperson.schema
After;
include /home/chamara/OpenLDAP/OpenLDAP/etc/openldap/schema/core.schema
Find;
BDB database definitions
Change them into;
suffix "dc=test,dc=com"
rootdn "cn=admin,dc=test,dc=com"
rootpw admin123
Add followings for the Mirror Mode Replication;
index objectClass eq
index entryCSN,entryUUID eq
syncrepl rid=002
provider=ldap://{$ip-address of the other OpenLDAP instance$}:1389/
type=refreshAndPersist
retry="60 30 300 +"
searchbase="dc=test,dc=com"
bindmethod=simple
binddn="cn=admin,dc=test,dc=com"
credentials=admin123
mirrormode TRUE
overlay syncprov
syncprov-checkpoint 100 10
syncprov-reloadhint true
syncprov-nopresent true
syncprov-sessionlog 100
For my machine; {$ip-address of the other OpenLDAP instance$} is
172.16.246.128
14. Now the configuration of OpenLDAP node 1 is done. Follow the same procedure for the OpenLDAP node2, and you will only have to change the ip-addresses in the ldap.conf and slapd.conf
15. Start OpenLDAP using following commands
$ ./libexec/slapd -h ldap://172.16.246.1:1389
or
$ ./libexec/slapd -h ldap://172.16.246.1:1389 -d3 (debug mode)
16. Create following files to add the default users to OpenLDAP store
$ vi build_root_ou.ldif
INSERT;
dn: dc=test,dc=com
objectClass: dcObject
objectClass: organizationalUnit
dc: test
ou: testou
$ vi add_user_ou.ldif
INSERT;
dn: ou=user,dc=test,dc=com
objectClass: organizationalUnit
ou: users
$ vi add_groups_ou.ldif
INSERT;
dn: ou=Groups,dc=test,dc=com
objectClass: organizationalUnit
ou: Groups
$ vi add_user_uid.ldif
INSERT;
dn: uid=admin,ou=user,dc=test,dc=com
cn: Admin
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: top
cn: WSO2
sn: Open Source Middleware
uid: admin
userPassword: {SSHA}A1toNdJpoocuptlnEYkKWZa45oxag4GG
Use;
$OpenLDAP_HOME/sbin$ ./slappasswd
to encrypt the password and get the SSHA value
/sbin$ ./slappasswd
New password:
Re-enter new password:
{SSHA}A1toNdJpoocuptlnEYkKWZa45oxag4GG
I used 'admin123' as password
17. Now use the following command to add the .ldif files to the ldap store
(Now I'm in the $OpenLDAP_HOME/etc/openldap dir. where all the .ldif files saved in)
$ ../../bin/ldapadd -D "cn=admin,dc=test,dc=com" -W -x -f build_root_ou.ldif
Enter LDAP Password:
adding new entry "dc=test,dc=com"
Follow the procedure;
$ ../../bin/ldapadd -D "cn=admin,dc=test,dc=com" -W -x -f add_user_ou.ldif
$ ../../bin/ldapadd -D "cn=admin,dc=test,dc=com" -W -x -f add_groups_ou.ldif
$ ../../bin/ldapadd -D "cn=admin,dc=test,dc=com" -W -x -f add_user_uid.ldif
18. The next step is to load balance the two OpenLDAP instance nodes by may be a hardware load balancer or a similar software LB.
If you can use ApacheDirectoryStudio and connect to one of the node's OpenLDAP ldap store you will see the ldap tree we created.
Network Parameters;
Authentication;
Now click on Finish button and you will be connected to the ldap store. You can browse and add users from there.
No comments:
Post a Comment