This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
установка_и_настройка_openldap [2022/05/17 12:44] val [Включение TLS] |
установка_и_настройка_openldap [2025/05/16 11:37] (current) val [Debian/Ubuntu] |
||
|---|---|---|---|
| Line 7: | Line 7: | ||
| <code> | <code> | ||
| - | root@server:~# apt install slapd ldap-utils | + | server# apt install slapd ldap-utils |
| Administrative password: secret | Administrative password: secret | ||
| - | root@server:~# less /etc/default/slapd | + | server# ldapsearch -x -b "dc=corpX,dc=un" |
| - | + | ||
| - | root@server:~# ldapsearch -x -b "dc=corpX,dc=un" | + | |
| </code> | </code> | ||
| ===== Отключение анонимного доступа ===== | ===== Отключение анонимного доступа ===== | ||
| + | |||
| + | * [[https://serverfault.com/questions/63916/how-to-disable-anonymous-access-on-ldap|How to disable anonymous access on LDAP]] | ||
| + | |||
| + | <code> | ||
| + | # ldapsearch -x -b"dc=corpX,dc=un" -H ldap://server -D "cn=admin,dc=corpX,dc=un" -w secret | ||
| + | </code> | ||
| ===== Включение TLS ===== | ===== Включение TLS ===== | ||
| * [[https://ubuntu.com/server/docs/service-ldap-with-tls|LDAP & TLS]] | * [[https://ubuntu.com/server/docs/service-ldap-with-tls|LDAP & TLS]] | ||
| + | * [[Пакет OpenSSL#Создание центра сертификации]] | ||
| <code> | <code> | ||
| Line 41: | Line 46: | ||
| # ldapmodify -Y EXTERNAL -H ldapi:/// -f certinfo.ldif | # ldapmodify -Y EXTERNAL -H ldapi:/// -f certinfo.ldif | ||
| + | root@server:~# cat /etc/default/slapd | ||
| + | </code><code> | ||
| + | ... | ||
| + | SLAPD_SERVICES="ldap://127.0.0.1:389/ ldaps:/// ldapi:///" | ||
| + | ... | ||
| + | </code><code> | ||
| + | # systemctl restart slapd.service | ||
| </code> | </code> | ||
| + | |||
| ===== Дополнительные материалы ===== | ===== Дополнительные материалы ===== | ||