EsPo
28.02.05, 15:48
Hallo zusammen ich hab ein kleines problem mit OpenLdap
hier mal meine configs
espo:~ espo$ cat /etc/openldap/ldap.conf
# $OpenLDAP: pkg/ldap/libraries/libldap/ldap.conf,v 1.9 2000/09/04 19:57:01 kurt Exp $
#
# LDAP Defaults
#
# See ldap.conf(5) for details
# This file should be world readable but not world writable.
host 192.168.0.3
base dc=vpn, dc=org
#BASE dc=example, dc=com
#URI ldap://ldap.example.com ldap://ldap-master.example.com:666
#SIZELIMIT 12
#TIMELIMIT 15
#DEREF never
TLS_REQCERT never
espo:~ espo$
$ cat slapd.conf
# $OpenLDAP: pkg/ldap/ser/devers/slapd/slapd.conf,v 1.23.2.5 2002/11/26 18:26:01 kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /home/espo/openldap/schema/core.schema
include /home/espo/openldap/schema/cosine.schema
include /home/espo/openldap/schema/nis.schema
include /home/espo/openldap/schema/inetorgperson.schema
# some nice certificates we just produced
#TLSCipherSuite HIGH:MEDIUM:+SSLv2
#TLSCertificateFile /etc/openldap/certificates/server_crt.pem
#TLSCertificateKeyFile /etc/openldap/certificates/server_key.pem
#TLSCACertificateFile /etc/openldap/certificates/cacert.pem
# Define global ACLs to disable default read access.
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org
pidfile /home/espo/openldap/slapd.pid
argsfile /home/espo/openldap/slapd.args
# Load dynamic backend modules:
# modulepath /usr/lib/openldap/openldap
# moduleload back_bdb.la
# moduleload back_ldap.la
# moduleload back_ldbm.la
# moduleload back_passwd.la
# moduleload back_shell.la
# Sample security restrictions
#
# Disallow clear text exchange of passwords
# disallow bind_simple_unprotected
# allow bind_simple_unprotected
#
# Require integrity protection (prevent hijacking)
# Require 112-bit (3DES or better) encryption for updates
# Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64
# Sample access control policy:
# Root DSE: allow anyone to read it
# Other DSEs:
# Allow self write access
# Allow authenticated users read access
# Allow anonymous users to authenticate
# Directives needed to implement policy:
# access to dn.base="" by * read
#access to attr=userpassword
# by anonymous auth
# by self write
#access to
#attr=objectclass,entry,mail,cn,sn,loginShell,tele phoneNumber,mobile,fax,userPassword,homePhone,home PostalAddress,initials,jpegPhoto,labeledURI,employ eeNumber,serialNumber,preferredLanguage
# by self write
# by * read
#access to
#attr=objectclass,entry,uid,mail,cn,sn,uidNumber,g idNumber,homeDirectory,loginShell,modifyTimestamp, shadowExpire
# by * read
access to *
by users read
by anonymous auth
# by self write
#
# if no access controls are present, the default policy is:
# Allow read by all
#
# rootdn can always write!
################################################## #####################
# ldbm database definitions
################################################## #####################
database ldbm
suffix "dc=vpn,dc=org"
rootdn "cn=espo,dc=vpn,dc=org"
# Cleartext passwords, especially for the rootdn, should
# be avoid. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw {SSHA}MBE61b+mAO99GakWA46kEx6HW7lmxjzH
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd/tools. Mode 700 recommended.
directory /home/espo/openldap/ldap
# Indices to maintain
index objectClass eq
#defaultaccess write
$
Nun versuch ich mit
espo:~ espo$ sudo ldapadd -D cn=espo,dc=vpn,dc=org -x -W -f org.ldif
Enter LDAP Password:
adding new entry "dc=org"
ldapadd: update failed: dc=org
ldap_add: Server is unwilling to perform (53)
additional info: referral missing
espo:~ espo$
diesem befehl etwas zu adden aber wie man sieht is es wohl nix geworden!
nun hier noch die org.ldif
dn: dc=org
objectclass: organization
o: org
dn: dc=vpn, dc=org
objectclass: organization
o: vpn.org
vielleicht kann mir jemand von euch helfen.
mfg eSpo
hier mal meine configs
espo:~ espo$ cat /etc/openldap/ldap.conf
# $OpenLDAP: pkg/ldap/libraries/libldap/ldap.conf,v 1.9 2000/09/04 19:57:01 kurt Exp $
#
# LDAP Defaults
#
# See ldap.conf(5) for details
# This file should be world readable but not world writable.
host 192.168.0.3
base dc=vpn, dc=org
#BASE dc=example, dc=com
#URI ldap://ldap.example.com ldap://ldap-master.example.com:666
#SIZELIMIT 12
#TIMELIMIT 15
#DEREF never
TLS_REQCERT never
espo:~ espo$
$ cat slapd.conf
# $OpenLDAP: pkg/ldap/ser/devers/slapd/slapd.conf,v 1.23.2.5 2002/11/26 18:26:01 kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /home/espo/openldap/schema/core.schema
include /home/espo/openldap/schema/cosine.schema
include /home/espo/openldap/schema/nis.schema
include /home/espo/openldap/schema/inetorgperson.schema
# some nice certificates we just produced
#TLSCipherSuite HIGH:MEDIUM:+SSLv2
#TLSCertificateFile /etc/openldap/certificates/server_crt.pem
#TLSCertificateKeyFile /etc/openldap/certificates/server_key.pem
#TLSCACertificateFile /etc/openldap/certificates/cacert.pem
# Define global ACLs to disable default read access.
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org
pidfile /home/espo/openldap/slapd.pid
argsfile /home/espo/openldap/slapd.args
# Load dynamic backend modules:
# modulepath /usr/lib/openldap/openldap
# moduleload back_bdb.la
# moduleload back_ldap.la
# moduleload back_ldbm.la
# moduleload back_passwd.la
# moduleload back_shell.la
# Sample security restrictions
#
# Disallow clear text exchange of passwords
# disallow bind_simple_unprotected
# allow bind_simple_unprotected
#
# Require integrity protection (prevent hijacking)
# Require 112-bit (3DES or better) encryption for updates
# Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64
# Sample access control policy:
# Root DSE: allow anyone to read it
# Other DSEs:
# Allow self write access
# Allow authenticated users read access
# Allow anonymous users to authenticate
# Directives needed to implement policy:
# access to dn.base="" by * read
#access to attr=userpassword
# by anonymous auth
# by self write
#access to
#attr=objectclass,entry,mail,cn,sn,loginShell,tele phoneNumber,mobile,fax,userPassword,homePhone,home PostalAddress,initials,jpegPhoto,labeledURI,employ eeNumber,serialNumber,preferredLanguage
# by self write
# by * read
#access to
#attr=objectclass,entry,uid,mail,cn,sn,uidNumber,g idNumber,homeDirectory,loginShell,modifyTimestamp, shadowExpire
# by * read
access to *
by users read
by anonymous auth
# by self write
#
# if no access controls are present, the default policy is:
# Allow read by all
#
# rootdn can always write!
################################################## #####################
# ldbm database definitions
################################################## #####################
database ldbm
suffix "dc=vpn,dc=org"
rootdn "cn=espo,dc=vpn,dc=org"
# Cleartext passwords, especially for the rootdn, should
# be avoid. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw {SSHA}MBE61b+mAO99GakWA46kEx6HW7lmxjzH
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd/tools. Mode 700 recommended.
directory /home/espo/openldap/ldap
# Indices to maintain
index objectClass eq
#defaultaccess write
$
Nun versuch ich mit
espo:~ espo$ sudo ldapadd -D cn=espo,dc=vpn,dc=org -x -W -f org.ldif
Enter LDAP Password:
adding new entry "dc=org"
ldapadd: update failed: dc=org
ldap_add: Server is unwilling to perform (53)
additional info: referral missing
espo:~ espo$
diesem befehl etwas zu adden aber wie man sieht is es wohl nix geworden!
nun hier noch die org.ldif
dn: dc=org
objectclass: organization
o: org
dn: dc=vpn, dc=org
objectclass: organization
o: vpn.org
vielleicht kann mir jemand von euch helfen.
mfg eSpo