186 z/VM and Linux on IBM System z: The Virtualization Cookbook for Red Hat Enterprise Linux 6.0
2. Start an SSH session to the IP address of the new virtual server running on LINUX02. Use
the yum command to install the OpenLDAP client and server RPMs:
# yum -y install openldap-clients openldap-servers
...
Installed:
openldap-clients.s390x 0:2.4.19-15.el6 openldap-servers.s390x 0:2.4.19-15.el6
Dependency Installed:
libtool-ltdl.s390x 0:2.2.6-15.5.el6
Complete!
OpenLDAP should now be installed on LINUX02.
11.2.2 Configuring the OpenLDAP server
Any detailed description of LDAP is outside the scope of this book. Only short configuration
recommendations are given in this section.
There are two important configuration values that must be chosen.
The suffix or base distinguished name of the LDAP Domain Information Tree (DIT). The
most common suffix is to use your company’s DNS name.
The LDAP administrator or root name and password.
Perform the following steps:
1. Choose an administrative password and run the slappasswd command, which displays an
encrypted version of it. The output of this command will be used shortly in a configuration
file, so you may want to make a copy of it.
# slappasswd
New password: lnx4vm
Re-enter new password: lnx4vm
{SSHA}6KT4R+YjZqDidFUNGUa4jrWFGaqEFfkV
2. The OpenLDAP server configuration file that contains the LDAP manager (root) password
is /etc/openldap/slapd.d/cn=config/olcDatabase={1}bdb.ldif. Make a backup copy of
that file:
# cd /etc/openldap/slapd.d/cn=config
# cp olcDatabase={1}bdb.ldif olcDatabase={1}bdb.ldif.orig
3. Edit the file and add one line to set the LDAP manager’s password. Use the variable
olcRootPW and set the password to the output of the previous slappasswd command:
# vi olcDatabase={1}bdb.ldif
dn: olcDatabase={1}bdb
objectClass: olcDatabaseConfig
objectClass: olcBdbConfig
olcDatabase: {1}bdb
olcSuffix: dc=my-domain,dc=com
olcAddContentAcl: FALSE
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootDN: cn=Manager,dc=my-domain,dc=com
olcRootPW: {SSHA}6KT4R+YjZqDidFUNGUa4jrWFGaqEFfkV
Commenti su questo manuale