Tag: openldap
Reverse Group Membership Maintenance
The memberof overlay updates an attribute (by default memberOf) whenever changes occur to the membership attribute (by default member) of entries of the objectclass (by default groupOfNames) configured to trigger updates. Add memberof module in cn=config dn: cn=module{0},cn=config changetype: modify add: olcModuleLoad olcModuleLoad: memberof.la Turn on memberof in the db dn: olcOverlay=memberof,olcDatabase={1}bdb,cn=config changetype: add objectClass: olcMemberOf objectClass: olcOverlayConfig objectClass: olcConfig objectClass: top olcOverlay: memberof olcMemberOfDangling: ignore olcMemberOfRefInt: TRUE olcMemberOfGroupOC: groupOfNames olcMemberOfMemberAD: member olcMemberOfMemberOfAD: memberOf It does not automatically update the existing data in the database, you need to re-load the DB to take effective Testing the function dn: uid=test1,ou=People,dc=q-station,dc=net changetype:
Openldap administration
Outline common openldap administration tasks, including reindexing, changing schema, etc., to make everyone have a quick reference.
Configuring OpenLDAP as a replacement for NIS
It should be an easy task in modern linux environment to use openldap as a central user database for authentication. I try to list out the steps about the implementation. The reference system is base on Slackware 13.37. Some packages may already included in your Linux distribution but not for mine. So, you may skip the installation process and jump to the configuration process.
openldap building and configuration
Try to config an openldap (2.4.29) as nss backend & pam backend for Linux, NIS replacement, as well as SAMBA PDC.