摘要：
没有DNS域名？这将创建您的目录路径的基本结构。阅读该消息以了解其工作原理。如何配置该路径没有任何问题。如果您在服务器上有一个实际域名，则可以使用该域名。否则，请使用每个人都喜欢的名称。在本文中，我们将进行测试。comOrganizationname？同样，这是给你的，我们将在本指南中使用示例。管理员密码？使用您在安装时配置的密码，或选择其他数据库后端密码？HDB何时删除数据库？没有移动旧数据库？
https://help.ubuntu.com/lts/serverguide/openldap-server.html
if error occurs in reinstall, try this:
"1)sudo apt-get purge slapd
2)sudo apt-get install slapd ldap-utils
"
you can configure ldap after install:
When the installation is complete, we actually need to reconfigure the LDAP package. Type the following to bring up the package configuration tool:
sudo dpkg-reconfigure slapd
You will be asked a series of questions about how you'd like to configure the software.
Omit OpenLDAP server configuration? No
DNS domain name?
- This will create the base structure of your directory path. Read the message to understand how it works.
- There are no set rules for how to configure this. If you have an actual domain name on this server, you can use that. Otherwise, use whatever you'd like.
- In this article, we will call it test.com
Organization name?
- Again, this is up to you
- We will use example in this guide.
Administrator password?
- Use the password you configured during installation, or choose another one
Database backend to use? HDB
Remove the database when slapd is purged? No
Move old database? Yes
Allow LDAPv2 protocol? No
https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-a-basic-ldap-server-on-an-ubuntu-12-04-vps
The ldap-utils package comes with enough utilities to manage the directory but the long string of options needed can make them a burden to use. The ldapscripts package contains wrapper scripts to these utilities that some people find easier to use.
Install the package:
sudo apt-get install ldapscripts
#################################################
then add two nodes ou=Groups and ou=Users to the LDAP, before add a group to LDAP
a stupid bug:
if the passwd contain some special character like"@",","....anything like that, then you will get error when add group use 'sudo ldapaddgroup test',like:
error adding group to ldap
so,give it a simple 'secret' passwd, like 'dog','monkey',,,,
############################################################################################## step by step :
first:
1)sudo apt-get purge slapd
2)sudo apt-get install slapd ldap-utils
do like above each some stupid error occurs that you can't solve.
second:
sudo dpkg-reconfigure lapd #configure according to the link2 above, you'd better don't configure it by hand.
third:
sudo apt-get install ldapscripts #install a convenient tools
and then, configure ldapscripts's configure file /etc/ldapscripts/ldapscripts.conf, add sentences, like:
SERVER=localhost
BINDDN='cn=admin,dc=example,dc=com'
BINDPWDFILE='/etc/ldapscripts/ldapscripts.passwd'
SUFFIX='dc=example,dc=com'
GSUFFIX='ou=Groups'
USUFFIX='ou=Users'
fourth:
add passwd to ldapscripts.passwd file :
sudo sh -c "echo -n 'monkey' > /etc/ldapscripts/ldapscripts.passwd"
then: you can operate LDAP using ldapscripts commands according to link 1.
warning: ldapscript will always return 'error adding group qa to LDAP',if the group already exists
http://www.meso.northwestern.edu/intranet/recipies/useful-computer-files-and-programs/configuring-group-linux-servers-and-terminals-with-ldap-kerberos-and-nfs/ldap-user-and-group-management
start LDAP server: /etc/init.d/lsapd