OpenLDAP configuration brought to Apache Directory Studio

3,335 views

Published on

Published in: Technology
0 Comments
3 Likes
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
3,335
On SlideShare
0
From Embeds
0
Number of Embeds
225
Actions
Shares
0
Downloads
22
Comments
0
Likes
3
Embeds 0
No embeds

No notes for slide

OpenLDAP configuration brought to Apache Directory Studio

  1. 1. OpenLDAP configuration brought to Apache Directory Studio 1
  2. 2. <OpenLDAP configuration/> brought to <Apache Directory Studio/> 2
  3. 3. Emmanuel Lécharny Apache Software Foundation member Chairman of MINA project PMC of Apache Directory Project elecharny@apache.org / elecharny@symas.com
  4. 4. Apache Directory Studio 4
  5. 5. OpenLDAP configuration slapd.conf Or cn=config/ 5
  6. 6. Slapd.conf # See slapd.conf(5) for details on configuration options. include "/opt/symas/etc/openldap/schema/core.schema" pidfile argsfile "/var/symas/run/slapd.pid" "/var/symas/run/slapd.args" # Choose the directory for loadable modules. modulepath "/opt/symas/lib/openldap" # Load dynamic backend modules: moduleload back_hdb.la moduleload back_monitor.la # Sample hdb database suffix rootdn rootpw database definitions hdb "dc=example,dc=com" "dc=example,dc=com" secret # Indices to maintain index default index objectClass index cn directory cachesize idlcachesize checkpoint database eq "/var/symas/openldap-data/example" 5000 5000 512 60 monitor 6
  7. 7. cn=config dn: cn=config olcWriteTimeout: 0 olcTLSCRLCheck: none olcConnMaxPendingAuth: 1000 olcIndexIntLen: 4 olcIdleTimeout: 0 olcIndexHash64: FALSE olcAttributeOptions: langolcConfigDir: etc/openldap/slapd.d olcIndexSubstrAnyStep: 2 olcPidFile: /var/symas/run/slapd.pid ... dn: cn=schema structuralObjectClass: olcSchemaConfig createTimestamp: 20131117072024.982Z olcObjectIdentifier: OLcfg 1.3.6.1.4.1.4203.1.12.2 olcObjectIdentifier: OLcfgAt OLcfg:3 olcObjectIdentifier: OLcfgGlAt OLcfgAt:0 olcObjectIdentifier: OLcfgBkAt OLcfgAt:1 olcObjectIdentifier: OLcfgDbAt OLcfgAt:2 olcObjectIdentifier: OLcfgOvAt OLcfgAt:3 olcObjectIdentifier: OLcfgCtAt OLcfgAt:4 olcObjectIdentifier: OLcfgOc OLcfg:4 ... dn: olcDatabase={1}hdb olcDbShmKey: 0 olcDbConfig: {0}# olcDbConfig: {1}# DB_CONFIG file for example database olcDbConfig: {2}# olcDbConfig: {3}# IMPORTANT olcDbConfig: {4}# Changes will automatically take effect after slapd is restarted. ... 7
  8. 8. Why cn=config ? Configuration in LDAP Can be replicated Allows dynamic configuration Protects against misconfigurations 8
  9. 9. But... People keep using vi/Emacs More complex than slapd.conf You have to use ldapadd/ldapmodify/ldapdelete 9
  10. 10. But... « It is of course possible for a careful, clueful admin to edit the files by hand without breaking anything. » « But let's face it, the majority of people out there, and particularly the people having problems that drive them to post on this mailing list, are neither careful enough nor clueful enough to qualify for these activities. » 10
  11. 11. Let's use Studio ! 11
  12. 12. OpenLDAP configuration plugin Don't have to lecture people who use text editors Config for dummies (almost) Many controls done by the plugin « smart » editors 12
  13. 13. Backend configuration 13
  14. 14. HDB configuration 14
  15. 15. Replication configuration 15
  16. 16. Options configuration 16
  17. 17. What's next ? Polish the editors Make it work with slapd.conf Add the missing elements Manage versions Release it !!! 17
  18. 18. Thanks!

×