Study with LDAP server on Linux

1. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
1
1) Introduction to OpenLDAP:
o OpenLDAP isa free,opensource implementationof the LightWeightDirectoryAccess
protocol (LDAP) developedbythe OpenLDAPproject.
o There are two requirementsuchas YaST Module forthe LDAPServerYaST Module Client.
2) Configure OpenLDAPwith GUI:
o OpeninTerminal > Type:yast lan.
o AssignIPaddress, SubnetMaskand Hostname > Next (PressAlt+ N key)

2. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
2
o Presskey alt + S to configure hostname/DNS > Puthostname anddomainname > Alt + O to
OK
o Type:yast –I to install service openldapserver.
o Type: Search Phrase tab > selectnss_ldap,openldap2-clientandpam_ldap(Pressarrow key
and space to selectthem) >Accept.

3. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
3
o Type:rcldap restart to restartldapservice.
o Type:yast to install serverandldapclient.
o Configure LDAP Server:
=> Choose NetworkServices>Choose LDAPServer> Enter.

4. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
4
=> SelectYes> Network (PresskeyAlt + e)
=> PutDomainname (Base DN),AdministratorDN name andpasswordLDAPAdministrator>Next
(Presskey Alt + N)

5. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
5
=> PresskeyAlt+ F to finish.
o Configure LDAP Client:

6. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
6
=> Choose NetworkServices>Choose LDAPClient>Enter.
=> SelectUse LDAP,Put IPaddress (Domain IP),Domainname (dc=pnc,dc=lan),SelectCreate Home
Directoryon Login (Pressspace keyto selectit) > PressAlt+ A to go to Advancedconfiguration.

7. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
7
=> PressAlt + m to go to AdministrationSetting.
=> Putuser Administrator(cn=Administrator) >Alt+ S (Setting).
=> Type passwordLDAPServer> OK (Alt+ O).
3) Create OU:
o Create mainOU name’sStudents
=> Create a file name’sOU.ldif.

8. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
8
=> Type:vi OU.ldif (Editcommandsyntax torun it to create ou).
=> Type the commandsyntax like below>Save (PressInsertkey to edit and Esc and Shift+ zz to
save)
=> Aftersave thisfile >Type: ldapadd –x –D cn=Administrator,dc=pnc,dc=lan –W–f OU.ldif torun
thiscommandsyntax.
=> Type:ldapsearch –x ou=StudentstofindthisOU.

9. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
9
o Create sub-OUname’s SNA-B:
=> Editcommand syntax like the filebelow.
=> Run commandsyntax inthisfile.
=> SearchthisOU.

10. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
10
4) Create user name’sSamnang in OUname’s SNA-B:
o Create file name’sUser.ldif.
o Type the command syntax like the filebelow >Run itto create the user.
o Run thisfile tocreate the user.

11. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
11
o Searchthisuser
5) Create username’sSophanninOU name’sSNA-B:
o Editthe commandsyntax like the file below:
o Run thiscommandfile tocreate the username’sSophann.

12. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
12
o Searchthisusername.
6) Create groupname’sSNA and addthe userstothis group:
o

13. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
13
7) Assignpassword to users:
o Type the command like belowtochange user’spassword.
8) Take another client(SUSE) join domainwith LDAP Serverand take one user to login:
o Take SUSE Clientjoindomain with LDAP Serer:

14. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
14
=> Type:yast to configure ldapclient.
=> Choose NetworkServicesandLDAPClient>Enter.
=> SelectUse LDAP,put IPLDAP Servers,dc=pnc,dc=lan> PressAlt+ A (Go to Advanced
Configuration)
=> PresskeyAlt+ S (Go to setting).

15. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
15
=> Type passwordLDAPServerand pressAlt+ O (OK)
=> PresskeyAlt+ O (OK)

16. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
16
o Take su username (suSamnang) > Enter
=> Or logoutthe machine thenswitchuser.

17. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
17
9) Take another windowsclientto joindomain and take one userto login:
o Take Windowsclientjoindomain (WindowsXP)
=> Install SAMBA Service onSUSE Linux Server:
=> Type samba intoSearchphrase tab > Selectsamba-docandsamba-winbind(Use arrow keyand
pressspace to selectthem) >Accept.

18. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
18
=> Type:rcsmb restartand rcnmb restartto restart SAMBA Service.
=> Type yast to configure sambaserver.

19. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
19
=> Choose NetworkServicesandSambaServer>Enter.
=> PutDomain’sname (pnc.lan) >Next(PressAlt+N)

20. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
20
=> Choose primaryDomainController>Next
=> PresskeyAlt+ d to go to Identity

21. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
21
=> Puthostname of machine Linux-Server>PressAlt+ L to go to LDAP Settings.
=> AssignnewpasswordtoAdministrator>PresskeyAt + T to testconnection.

22. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
22
=> VerifypasswordSamba>OK
=> PingIPaddressfromWindowsXPto Linux-Server(192.168.112.14)

23. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
23
=> PutDomainname > OK > Put username andpasswordof Linux-Server>OK
=> Type:smbpasswd –a SophanntoAdduser SophanntoSamba.

24. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
24
=> Putusername andpassword> Enter
=> The user name SophannisloggedintoWindowsXP
10) Search all research ofobjects:

25. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
25

26. PasserellesNumériquesCambodia Date: 19/06/2016
SamNangLEAP (SNA2017_B)
26
11) Delete one user from OpenLDAP Server:
o Type:ldapdelete –W–D cn=Administrator,dc=pnc,dc=lanuid=Samnang,ou=SNA-
B,ou=Students,dc=pnc,dc=lan.
o Nowthe username Samnangdoesnotexist.