mirror of
https://github.com/Ponce/slackbuilds
synced 2024-11-16 19:50:19 +01:00
network/openldap-server: Added (OpenLDAP server).
Signed-off-by: David Spencer <idlemoor@slackbuilds.org>
This commit is contained in:
parent
09859e3dfe
commit
683caa309d
8 changed files with 553 additions and 0 deletions
22
network/openldap-server/README
Normal file
22
network/openldap-server/README
Normal file
|
@ -0,0 +1,22 @@
|
|||
OpenLDAP Server
|
||||
|
||||
OpenLDAP is an open source implementation of the Lightweight Directory
|
||||
Access Protocol.
|
||||
|
||||
The suite includes:
|
||||
|
||||
* slapd - stand-alone LDAP daemon (server)
|
||||
* libraries implementing the LDAP protocol
|
||||
* utilities, tools, and sample clients.
|
||||
|
||||
|
||||
Groupname and Username
|
||||
|
||||
You must have the 'ldap' group and user to run this script,
|
||||
for example:
|
||||
|
||||
groupadd -g 330 ldap
|
||||
useradd -u 330 -d /var/lib/openldap -s /bin/false -c "OpenLDAP server" -g ldap ldap
|
||||
|
||||
|
||||
For more information see README.SLACKWARE
|
103
network/openldap-server/README.SLACKWARE
Normal file
103
network/openldap-server/README.SLACKWARE
Normal file
|
@ -0,0 +1,103 @@
|
|||
# Initial Setup
|
||||
|
||||
Set the directory suffix and Manager user in your slapd.conf(5):
|
||||
|
||||
[...]
|
||||
suffix "dc=example,dc=org"
|
||||
rootdn "cn=Manager,dc=example,dc=org"
|
||||
rootpw {SSHA}CjQ2ddDHu92qd2BrcNYT1hQDzLrVlgCo # Encryted password using slappasswd(8)
|
||||
[...]
|
||||
|
||||
Create the DB_CONFIG file to initialize the database:
|
||||
|
||||
# cd /var/lib/openldap
|
||||
# cp -a DB_CONFIG.example DB_CONFIG
|
||||
|
||||
|
||||
|
||||
# Logging
|
||||
|
||||
Add this to your /etc/syslog.conf file, and then restart syslogd,
|
||||
to enable the slapd log file:
|
||||
|
||||
local4.* -/var/log/slapd
|
||||
|
||||
|
||||
|
||||
# Configuration
|
||||
|
||||
All configuration and schemas are stored in /etc/openlap
|
||||
|
||||
slapd.conf legacy OpenLDAP configuration file (see slapd.conf(5))
|
||||
slapd.ldif OpenLDAP configuration file (see slapd-config(5))
|
||||
ldap.conf ldap client (eg. ldapsearch) configuration file (see ldap.conf(5))
|
||||
certs/ directory can contains server certificates
|
||||
schema/ OpenLDAP schema
|
||||
|
||||
The default OpenLDAP database is located in /var/lib/openldap
|
||||
|
||||
*NOTE* OpenLDAP 2.3 and later supports old slapd.conf(5) and dynamic
|
||||
configuration engine, slapd-config(5).
|
||||
|
||||
|
||||
|
||||
# Using the slapd.d directory
|
||||
|
||||
An existing slapd.conf(5) file can be converted to the new format using
|
||||
slaptest(8):
|
||||
|
||||
# sh /etc/rc.d/rc.openldap stop
|
||||
# mkdir -p /etc/openldap/slapd.d
|
||||
# slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d
|
||||
# chown ldap:ldap /etc/openldap/slapd.d
|
||||
|
||||
|
||||
|
||||
# Starting and Stopping the OpenLDAP server
|
||||
|
||||
This package provides the /etc/rc.d/rc.openldap start/stop script.
|
||||
|
||||
Slackware is OpenLDAP server ready (see the rc.M script) and you can start
|
||||
the OpenLDAP server automatically at boot by adding execution permission to
|
||||
/etc/rc.d/rc.openldap
|
||||
|
||||
|
||||
|
||||
# Troubleshooting
|
||||
|
||||
## Can't contact LDAP server via ldapi:/// url
|
||||
|
||||
$ ldapadd -Y EXTERNAL -H ldapi:/// -f /tmp/test.ldif
|
||||
ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1)
|
||||
|
||||
openldap-server package use the same libraries from n/openldap-client Slackware
|
||||
package. The openldap-client package use a non-standard location for ldapi socket.
|
||||
|
||||
### Solution 1
|
||||
|
||||
Create a symlink from /var/run/openldap/ldapi to /var/lib/run/ldapi
|
||||
|
||||
# mkdir -p /var/lib/run
|
||||
# ln -sf /var/run/openldap/ldapi /var/lib/run/ldapi
|
||||
|
||||
### Solution 2
|
||||
|
||||
Change or add the URI in ldap.conf(5) file:
|
||||
|
||||
URI ldapi://%2fvar%2frun%2fopenldap%2fldapi
|
||||
|
||||
Run the ldap utility command without "-H" argument (example):
|
||||
|
||||
$ ldapadd -Y EXTERNAL -f /tmp/test.ldif
|
||||
|
||||
### Solution 3
|
||||
|
||||
Use ldapi url with ldap utility command:
|
||||
|
||||
$ ldapadd -Y EXTERNAL -H ldapi://%2fvar%2frun%2fopenldap%2fldapi -f /tmp/test.ldif
|
||||
|
||||
|
||||
|
||||
# Documentation
|
||||
|
||||
See /usr/doc/openldap-2.4.42/guide.html (OpenLDAP Administrator Guide)
|
28
network/openldap-server/doinst.sh
Normal file
28
network/openldap-server/doinst.sh
Normal file
|
@ -0,0 +1,28 @@
|
|||
config() {
|
||||
NEW="$1"
|
||||
OLD="`dirname $NEW`/`basename $NEW .new`"
|
||||
# If there's no config file by that name, mv it over:
|
||||
if [ ! -r $OLD ]; then
|
||||
mv $NEW $OLD
|
||||
elif [ "`cat $OLD | md5sum`" = "`cat $NEW | md5sum`" ]; then # toss the redundant copy
|
||||
rm $NEW
|
||||
fi
|
||||
# Otherwise, we leave the .new copy for the admin to consider...
|
||||
}
|
||||
|
||||
preserve_perms() {
|
||||
NEW="$1"
|
||||
OLD="$(dirname $NEW)/$(basename $NEW .new)"
|
||||
if [ -e $OLD ]; then
|
||||
cp -a $OLD ${NEW}.incoming
|
||||
cat $NEW > ${NEW}.incoming
|
||||
mv ${NEW}.incoming $NEW
|
||||
fi
|
||||
config $NEW
|
||||
}
|
||||
|
||||
preserve_perms etc/rc.d/rc.openldap.new
|
||||
|
||||
config etc/openldap/slapd.conf.new
|
||||
config etc/openldap/slapd.ldif.new
|
||||
config etc/default/slapd.new
|
255
network/openldap-server/openldap-server.SlackBuild
Normal file
255
network/openldap-server/openldap-server.SlackBuild
Normal file
|
@ -0,0 +1,255 @@
|
|||
#!/bin/sh
|
||||
|
||||
# Slackware build script for OpenLDAP server
|
||||
|
||||
# Copyright 2015-2017 Giuseppe Di Terlizzi <giuseppe.diterlizzi@gmail.com>
|
||||
# All rights reserved.
|
||||
#
|
||||
# Redistribution and use of this script, with or without modification, is
|
||||
# permitted provided that the following conditions are met:
|
||||
#
|
||||
# 1. Redistributions of this script must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
|
||||
# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
||||
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
|
||||
# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
|
||||
# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
|
||||
# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
|
||||
# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
PRGNAM=openldap-server
|
||||
VERSION=${VERSION:-2.4.42}
|
||||
BUILD=${BUILD:-1}
|
||||
TAG=${TAG:-_SBo}
|
||||
|
||||
CWD=$(pwd)
|
||||
TMP=${TMP:-/tmp/SBo}
|
||||
PKG=$TMP/package-$PRGNAM
|
||||
OUTPUT=${OUTPUT:-/tmp}
|
||||
|
||||
if [ -z "$ARCH" ]; then
|
||||
case "$( uname -m )" in
|
||||
i?86) export ARCH=i586 ;;
|
||||
arm*) export ARCH=arm ;;
|
||||
*) export ARCH=$( uname -m ) ;;
|
||||
esac
|
||||
fi
|
||||
|
||||
if [ "$ARCH" = "i586" ]; then
|
||||
SLKCFLAGS="-O2 -march=i586 -mtune=i686"
|
||||
LIBDIRSUFFIX=""
|
||||
elif [ "$ARCH" = "i686" ]; then
|
||||
SLKCFLAGS="-O2 -march=i686 -mtune=i686"
|
||||
LIBDIRSUFFIX=""
|
||||
elif [ "$ARCH" = "x86_64" ]; then
|
||||
SLKCFLAGS="-O2 -fPIC"
|
||||
LIBDIRSUFFIX="64"
|
||||
else
|
||||
SLKCFLAGS="-O2"
|
||||
LIBDIRSUFFIX=""
|
||||
fi
|
||||
|
||||
set -e
|
||||
|
||||
if ! grep ^ldap: /etc/group 2>&1 > /dev/null; then
|
||||
echo " You must have a ldap group to run this script."
|
||||
echo " # groupadd -r -g 330 ldap"
|
||||
echo " Or something similar."
|
||||
exit 1
|
||||
elif ! grep ^ldap: /etc/passwd 2>&1 > /dev/null; then
|
||||
echo " You must have a ldap user to run this script."
|
||||
echo " # useradd -r -u 330 -g ldap -d /var/lib/openldap -s /bin/false -c \"OpenLDAP server\" ldap"
|
||||
echo " Or something similar."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
rm -rf $PKG
|
||||
mkdir -p $TMP $PKG
|
||||
cd $TMP
|
||||
rm -rf openldap-$VERSION
|
||||
tar xvf $CWD/openldap-$VERSION.t*z*
|
||||
cd openldap-$VERSION
|
||||
chown -R root:root .
|
||||
find -L . \
|
||||
\( -perm 777 -o -perm 775 -o -perm 750 -o -perm 711 -o -perm 555 \
|
||||
-o -perm 511 \) -exec chmod 755 {} \; -o \
|
||||
\( -perm 666 -o -perm 664 -o -perm 640 -o -perm 600 -o -perm 444 \
|
||||
-o -perm 440 -o -perm 400 \) -exec chmod 644 {} \;
|
||||
|
||||
|
||||
# Change the location of run directory into /var/run/openldap
|
||||
sed -i -e 's|%LOCALSTATEDIR%/run/|/var/run/openldap/|' \
|
||||
servers/slapd/slapd.*
|
||||
|
||||
# Change the location of ldapi socket into /var/run/openldap
|
||||
sed -i -e 's|\(#define LDAPI_SOCK\).*|\1 "/var/run/openldap/ldapi"|' \
|
||||
include/ldap_defaults.h
|
||||
|
||||
# Change the default OpenLDAP database directory
|
||||
sed -i -e 's|openldap-data|lib/openldap|' \
|
||||
servers/slapd/slapd.* include/ldap_defaults.h servers/slapd/Makefile.in
|
||||
|
||||
|
||||
CFLAGS="$SLKCFLAGS" \
|
||||
./configure \
|
||||
--prefix=/usr \
|
||||
--exec-prefix=/usr \
|
||||
--sysconfdir=/etc \
|
||||
--mandir=/usr/man \
|
||||
--localstatedir=/var \
|
||||
--libdir=/usr/lib${LIBDIRSUFFIX} \
|
||||
\
|
||||
--enable-debug \
|
||||
--enable-dynamic \
|
||||
--enable-syslog \
|
||||
--enable-proctitle \
|
||||
--enable-ipv6 \
|
||||
--enable-local \
|
||||
\
|
||||
--enable-slapd \
|
||||
--enable-dynacl \
|
||||
--enable-aci \
|
||||
--enable-cleartext \
|
||||
--enable-crypt \
|
||||
--enable-lmpasswd \
|
||||
--enable-spasswd \
|
||||
--enable-modules \
|
||||
--enable-rewrite \
|
||||
--enable-rlookups \
|
||||
--enable-slapi \
|
||||
--disable-slp \
|
||||
--enable-wrappers \
|
||||
\
|
||||
--enable-backends=mod \
|
||||
--enable-bdb=yes \
|
||||
--enable-hdb=yes \
|
||||
--enable-mdb=yes \
|
||||
--enable-monitor=yes \
|
||||
--enable-perl=yes \
|
||||
--disable-ndb \
|
||||
\
|
||||
--enable-overlays=mod \
|
||||
\
|
||||
--disable-static \
|
||||
--enable-shared \
|
||||
\
|
||||
--with-cyrus-sasl \
|
||||
--without-fetch \
|
||||
--with-threads \
|
||||
--with-pic \
|
||||
--with-tls
|
||||
|
||||
make depend
|
||||
|
||||
# Build only slapd server. The libraries and header files are present in
|
||||
# Slackware n/openldap-client package
|
||||
|
||||
( cd libraries
|
||||
make
|
||||
)
|
||||
|
||||
( cd servers
|
||||
make -j1
|
||||
make -j1 install DESTDIR=$PKG
|
||||
)
|
||||
|
||||
( cd doc
|
||||
make
|
||||
make install DESTDIR=$PKG
|
||||
)
|
||||
|
||||
rm -f $PKG/etc/openldap/*.default
|
||||
|
||||
# Copy default slapd configuration
|
||||
mv $PKG/etc/openldap/slapd.conf $PKG/etc/openldap/slapd.conf.new
|
||||
mv $PKG/etc/openldap/slapd.ldif $PKG/etc/openldap/slapd.ldif.new
|
||||
|
||||
# Create a symlink for slapd into /usr/sbin
|
||||
mkdir -p $PKG/usr/sbin
|
||||
( cd $PKG/usr/sbin ; ln -sf ../libexec/slapd slapd )
|
||||
|
||||
# Create OpenLDAP run directory
|
||||
mkdir -p $PKG/var/run/openldap
|
||||
|
||||
# Fix ldapi socket location for n/openldap-client package
|
||||
mkdir -p $PKG/var/lib/run
|
||||
( cd $PKG/var/lib/run; ln -sf ../../run/openldap/ldapi ldapi )
|
||||
|
||||
# Create OpenLDAP certificates directory
|
||||
mkdir -p $PKG/etc/openldap/certs
|
||||
|
||||
# Copy rc.openldap
|
||||
mkdir -p $PKG/etc/rc.d
|
||||
cat $CWD/rc.openldap > $PKG/etc/rc.d/rc.openldap.new
|
||||
|
||||
# Copy slapd default file
|
||||
mkdir -p $PKG/etc/default
|
||||
cat $CWD/slapd > $PKG/etc/default/slapd.new
|
||||
|
||||
mkdir -p $PKG/usr/doc/$PRGNAM-$VERSION
|
||||
cat $CWD/$PRGNAM.SlackBuild > $PKG/usr/doc/$PRGNAM-$VERSION/$PRGNAM.SlackBuild
|
||||
cat $CWD/README.SLACKWARE > $PKG/usr/doc/$PRGNAM-$VERSION/README.SLACKWARE
|
||||
|
||||
cp -a \
|
||||
ANNOUNCEMENT COPYRIGHT LICENSE README CHANGES \
|
||||
$PKG/usr/doc/$PRGNAM-$VERSION
|
||||
|
||||
# Include monitor backend README
|
||||
cp -a \
|
||||
servers/slapd/back-monitor/README \
|
||||
$PKG/usr/doc/$PRGNAM-$VERSION/README.back-monitor
|
||||
|
||||
# Include Perl backend README
|
||||
cp -a \
|
||||
servers/slapd/back-perl/README \
|
||||
$PKG/usr/doc/$PRGNAM-$VERSION/README.back-perl
|
||||
|
||||
# Include Perl backend sample file
|
||||
cp -a \
|
||||
servers/slapd/back-perl/SampleLDAP.pm \
|
||||
$PKG/usr/doc/$PRGNAM-$VERSION
|
||||
|
||||
# Include OpenLDAP documentation
|
||||
cp -a \
|
||||
doc/guide/admin/*.png \
|
||||
doc/guide/admin/*.html \
|
||||
$PKG/usr/doc/$PRGNAM-$VERSION
|
||||
|
||||
# Fix permissions
|
||||
chmod 755 $PKG/usr/lib${LIBDIRSUFFIX}/*.so.*
|
||||
chmod 700 $PKG/var/lib/openldap
|
||||
chmod 755 $PKG/usr/libexec/openldap
|
||||
|
||||
# Fix ownership
|
||||
chown -R ldap:ldap $PKG/var/lib/openldap
|
||||
chown -R ldap:ldap $PKG/var/run/openldap
|
||||
chown -R ldap:ldap $PKG/etc/openldap
|
||||
|
||||
# Remove OpenLDAP client man pages
|
||||
rm -rf $PKG/usr/man/man1
|
||||
rm -rf $PKG/usr/man/man3
|
||||
rm -rf $PKG/usr/man/man5/{ldap,ldif}.*
|
||||
|
||||
find $PKG/usr/man -type f -exec gzip -9 {} \;
|
||||
for i in $( find $PKG/usr/man -type l ) ; do ln -s $( readlink $i ).gz $i.gz ; rm $i ; done
|
||||
|
||||
find $PKG -print0 | xargs -0 file | grep -e "executable" -e "shared object" | grep ELF \
|
||||
| cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null || true
|
||||
|
||||
# Create an empty slapd log file
|
||||
mkdir -p $PKG/var/log
|
||||
touch $PKG/var/log/slapd
|
||||
chown ldap:ldap $PKG/var/log/slapd
|
||||
|
||||
|
||||
mkdir $PKG/install
|
||||
cat $CWD/slack-desc > $PKG/install/slack-desc
|
||||
cat $CWD/doinst.sh > $PKG/install/doinst.sh
|
||||
|
||||
cd $PKG
|
||||
makepkg -l y -c n $OUTPUT/$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.${PKGTYPE:-tgz}
|
10
network/openldap-server/openldap-server.info
Normal file
10
network/openldap-server/openldap-server.info
Normal file
|
@ -0,0 +1,10 @@
|
|||
PRGNAM="openldap-server"
|
||||
VERSION="2.4.42"
|
||||
HOMEPAGE="http://www.openldap.org"
|
||||
DOWNLOAD="http://www.openldap.org/software/download/OpenLDAP/openldap-release/openldap-2.4.42.tgz"
|
||||
MD5SUM="47c8e2f283647a6105b8b0325257e922"
|
||||
DOWNLOAD_x86_64=""
|
||||
MD5SUM_x86_64=""
|
||||
REQUIRES=""
|
||||
MAINTAINER="Giuseppe Di Terlizzi"
|
||||
EMAIL="giuseppe.diterlizzi@gmail.com"
|
100
network/openldap-server/rc.openldap
Normal file
100
network/openldap-server/rc.openldap
Normal file
|
@ -0,0 +1,100 @@
|
|||
#!/bin/sh
|
||||
|
||||
# OpenLDAP Server start/stop script
|
||||
|
||||
|
||||
. /etc/default/slapd
|
||||
|
||||
PID_FILE=/var/run/openldap/slapd.pid
|
||||
EXEC=/usr/sbin/slapd
|
||||
|
||||
|
||||
# re-create /var/run/openldap directory
|
||||
if [ ! -d /var/run/openldap ]; then
|
||||
mkdir -p /var/run/openldap
|
||||
chown ldap:ldap /var/run/openldap
|
||||
fi
|
||||
|
||||
|
||||
slapd_start() {
|
||||
|
||||
echo -n "Starting OpenLDAP server..."
|
||||
|
||||
if [ -e $PID_FILE ]; then
|
||||
|
||||
if ps axc | grep slapd >/dev/null 2>&1 ; then
|
||||
echo "already running!"
|
||||
return 1
|
||||
else
|
||||
rm $PID_FILE
|
||||
fi
|
||||
|
||||
fi
|
||||
|
||||
$EXEC -u ldap -h "$SLAPD_URLS" $SLAPD_OPTIONS > /dev/null 2>&1
|
||||
echo "done!"
|
||||
|
||||
}
|
||||
|
||||
|
||||
slapd_stop() {
|
||||
|
||||
echo -n "Stopping OpenLDAP server..."
|
||||
|
||||
if [ -e $PID_FILE ]; then
|
||||
if ps axc | grep slapd >/dev/null 2>&1; then
|
||||
kill -INT $(cat $PID_FILE)
|
||||
else
|
||||
echo "already stopped!"
|
||||
fi
|
||||
fi
|
||||
|
||||
rm $PID_FILE >/dev/null 2>&1
|
||||
echo "done!"
|
||||
|
||||
}
|
||||
|
||||
|
||||
slapd_restart() {
|
||||
slapd_stop
|
||||
sleep 1
|
||||
slapd_start
|
||||
}
|
||||
|
||||
|
||||
slapd_status() {
|
||||
|
||||
if [ -e $PID_FILE ]; then
|
||||
if ps axc | grep slapd >/dev/null 2>&1; then
|
||||
echo "OpenLDAP is running!"
|
||||
return 0
|
||||
fi
|
||||
|
||||
echo "OpenLDAP PID file exists but the service is down!"
|
||||
return 1
|
||||
|
||||
else
|
||||
echo "OpenLDAP is stopped!"
|
||||
return 0
|
||||
fi
|
||||
|
||||
}
|
||||
|
||||
|
||||
case "$1" in
|
||||
'start')
|
||||
slapd_start
|
||||
;;
|
||||
'stop')
|
||||
slapd_stop
|
||||
;;
|
||||
'restart')
|
||||
slapd_restart
|
||||
;;
|
||||
'status')
|
||||
slapd_status
|
||||
;;
|
||||
*)
|
||||
echo "usage $0 start|stop|restart"
|
||||
esac
|
||||
|
19
network/openldap-server/slack-desc
Normal file
19
network/openldap-server/slack-desc
Normal file
|
@ -0,0 +1,19 @@
|
|||
# HOW TO EDIT THIS FILE:
|
||||
# The "handy ruler" below makes it easier to edit a package description.
|
||||
# Line up the first '|' above the ':' following the base package name, and
|
||||
# the '|' on the right side marks the last column you can put a character in.
|
||||
# You must make exactly 11 lines for the formatting to be correct. It's also
|
||||
# customary to leave one space after the ':' except on otherwise blank lines.
|
||||
|
||||
|-----handy-ruler------------------------------------------------------|
|
||||
openldap-server: openldap-server (OpenLDAP server)
|
||||
openldap-server:
|
||||
openldap-server: OpenLDAP is an open source implementation of the Lightweight
|
||||
openldap-server: Directory Access Protocol. LDAP is a alternative to the X.500
|
||||
openldap-server: Directory Access Protocol (DAP). It uses the TCP/IP stack versus
|
||||
openldap-server: the overly complex OSI stack.
|
||||
openldap-server:
|
||||
openldap-server: LDAP is often used to provide authentication (such as for email).
|
||||
openldap-server:
|
||||
openldap-server: The OpenLDAP homepage is http://www.openldap.org/
|
||||
openldap-server:
|
16
network/openldap-server/slapd
Normal file
16
network/openldap-server/slapd
Normal file
|
@ -0,0 +1,16 @@
|
|||
# OpenLDAP server configuration
|
||||
# see 'man slapd' for additional information
|
||||
|
||||
# Where the server will run (-h option)
|
||||
# - ldapi:/// is required for on-the-fly configuration using client tools
|
||||
# (use SASL with EXTERNAL mechanism for authentication)
|
||||
# - default: ldapi:/// ldap:///
|
||||
# - example: ldapi:/// ldap://127.0.0.1/ ldap://10.0.0.1:1389/ ldaps:///
|
||||
SLAPD_URLS="ldapi:/// ldap:///"
|
||||
|
||||
# Any custom options
|
||||
#SLAPD_OPTIONS=""
|
||||
|
||||
# Keytab location for GSSAPI Kerberos authentication
|
||||
#KRB5_KTNAME="FILE:/etc/openldap/ldap.keytab"
|
||||
|
Loading…
Reference in a new issue