您的位置：首页 > 其它

原创 WINDOWS下搭建LDAP服务器收藏

2009-02-26 14:17 816 查看

//<![CDATA[
var Anthem_FormID = "Form1";
//]]>

慧星轨道'S blog

欢迎 ling_iori

我的首页

文章管理

写文章

退出

全站当前博客

空间

博客

好友

相册

留言

用户操作[即时聊天] [发私信] [加为好友]gzaqq

gzaqq的公告....最近评论yuanyon7：博主这篇介绍不是介绍equals 和 == 是在讲String
String 的详解具体参考JDK
== 永远比较的是地址
equals 比较的是内容是片面的: Object类equals比较的还是地址；String首先比较地址，如果地址相同则返回true ，其次在比较内容
参考JDK源码c2unix：写的真垃圾，语言表达能力真差劲wbzzj：真是笨蛋呀，首先分离数据库，然后把日志文件移到另外一个地方，然后再附加数据库就完成了。哈哈rain_cn：java综合网 http://www.javazh.cn 很好！不错！zgz_007：谢谢，可以了！文章分类

AJAX (RSS)

C#学习 (RSS)

DotNet开发 (RSS)

java (RSS)

Linux应用 (RSS)

SQL应用 (RSS)

乱七八糟的随笔 (RSS)

音乐收藏 (RSS)

收藏

j2ee

电影网站收藏

相册ajaxdwr 上传文件 dwr 中文很好看的文件上传ajax--dwrasp.netASP.NET 2.0个性化配置（profile） Struts+Spring+Hibernate练习(完整)j2eeEclipse+MyEclipse+Struts+Hibernate+MySql动画系列教程 J2EE从入门到精通第1讲]搭建Eclipse+MyEclipse+tomcat开发环境 JAVA开源大全 Spring+Hibernate+Struts webgis'blog 免费MYSQL空间存档

2008年12月(1)

2008年09月(3)

2008年08月(1)

2008年04月(2)

2007年12月(2)

2007年11月(2)

2007年10月(2)

2007年09月(1)

2007年08月(1)

2007年07月(2)

2007年06月(1)

2007年05月(2)

2007年04月(3)

2007年03月(1)

2007年01月(1)

2006年12月(1)

2006年11月(1)

2006年09月(2)

2006年08月(1)

2006年07月(1)

2006年06月(1)

2006年05月(2)

2006年04月(6)

2006年03月(8)

2006年02月(3)

软件项目交易订阅我的博客

[意见反馈][官方博客]系统公告：2009年2月23日，博客升级公告！

WINDOWS下搭建LDAP服务器 收藏

function StorePage(){d=document;t=d.selection?(d.selection.type!='None'?d.selection.createRange().text:''):(d.getSelection?d.getSelection():'');void(keyit=window.open('http://www.365key.com/storeit.aspx?t='+escape(d.title)+'&u='+escape(d.location.href)+'&c='+escape(t),'keyit','scrollbars=no,width=475,height=575,left=75,top=20,status=no,resizable=yes'));keyit.focus();}
原文地址： http://mguessan.free.fr/nt/openldap_en.html

LDAP服务器:http://download.bergmans.us/openldap/openldap-2.2.29/openldap-2.2.29-db-4.3.29-openssl-0.9.8a-win32_Setup.exe

还要修改一个地方:在slapd.conf中把include ./schema/core.schema改成：

include ./schema/core.schema
include ./schema/cosine.schema
include ./schema/misc.schema
include ./schema/inetorgperson.schema

原文：

Many commercial solutions are available to build an LDAP directory.
However most products are either very expensive or not standards
compliant (e.g. Active Directory).

OpenLDAP is an Opensource LDAP server designed for Unix platforms. A
Windows release of this solution would be valuable for those who are
stuck to a Microsoft Windows environment.

Thanks to Lucas Bergman, from FiveSight
, such release is available. He developed the necessary patches and
build process to deliver a binary package ready for use. The initial
version hosted at FiveSight is no longer available, but Lucas keeps
working on the windows port and built a new release, complete with
installer: ( http://lucas.bergmans.us/hacks/openldap/ ). Lucas is now lucky enough to work mainly on Unix and Matthias Mohr has taken the lead. His updated builds are available at: http://download.bergmans.us/openldap/openldap-2.2.29/openldap-2.2.29-db-4.3.29-openssl-0.9.8a-win32_Setup.exe

For the impatients, or those who don't want to bother with config
files, the Ilex company released another version with a more
comprehensive installer, but an older version of OpenLDAP. This package
is available at: http://www.ilex.fr/openldap.htm .

Installation
Download the OpenLDAP installer from: http://download.bergmans.us/openldap/openldap-2.2.29/openldap-2.2.29-db-4.3.29-openssl-0.9.8a-win32_Setup.exe .

Launch the installer, select language, accept license and choose target installation directory. The default is:

c:/Program Files/OpenLDAP

. As spaces in directory names usually lead to trouble, choose another place, e.g.

c:/openldap

.

Matthias improved the installer to automatically register OpenLDAP
as an NT service and install BDB tools. Those are useful to fix a
broken database after a system crash.

The installer let you choose service start up mode (auto or manual)
and automatically builds a valid configuration. The OpenLDAP start up
files are stored in

c:/openldap/run

, the directory data files end up in

c:/openldap/var/openldap-data

.

Configuration
The main OpenLDAP configuration file is

slapd.conf

. It has to be customized before launching the server.

This is just a quick start guide, please have a look at the official OpenLDAP documentation for more information.

Specify the Unicode data directory, by default:

./ucdata

.

Choose
the needed LDAP schemas. Schemas define directory structure, like
columns and tables in a relational database. The core schema is
mandatory, add the java schema if you intend to use OpenLDAP as a JNDI
server.

Configure the path for OpenLDAP pid and args
start up files. The first contains the server pid, the second includes
command line arguments.

Choose the database type, by default bdb (Berkeley DB).

Specify
the server suffix. All entries in the directory will have this suffix,
which represents the root of the directory tree. For example, with

suffix "dc=guessant,dc=org"

, the fully qualified name of all entries in the database will end with:

dc=guessant,dc=org

.

Define the name of the administrator entry for the server, named the

rootdn

, along with its password

rootpw

. This is the super user of the server. The

rootdn

name must match the suffix defined above. As stated, all entry names must end with the suffix, and the

rootdn

is an entry.

Example configuration file:

ucdata-path ./ucdata
include ./schema/core.schema

pidfile ./run/slapd.pid
argsfile ./run/slapd.args

database bdb
suffix "dc=guessant,dc=org"
rootdn "cn=Manager,dc=guessant,dc=org"
rootpw secret
directory ./data

Startup
The

slapd.exe

executable is the OpenLDAP server. Double
click on this file or launch it from a command line. Do not expect any
message, but leave the command window open for the next steps. If you
want debug information, use the

-d

switch:

slapd -d 1

Server test
The OpenLDAP command line tools can be used to test the server. The following command executes a search query on the server:

ldapsearch -x -s base (objectclass=*) namingContexts

Type this command in a

cmd

window positioned in the OpenLDAP installation directory. For more information on search syntax, try

ldapsearch -?

.

In order to ease server administration, you can switch to a
graphical LDAP client, such as the LDAP Browser/Editor developed by
Jarek Gawor, available at: http://www.iit.edu/~gawojar/ldap

Start the client and provide connection information:

The connection must succeed, but an error message is displayed in the status bar:

List Failed

. This error is expected as there is no entry in the database, double click on the message to get more details.

Build directory content
In order to insert the first entries in the database, create an

init.ldif

file and add the following content (according to the configuration specified in slapd.conf):

dn: dc=guessant,dc=org
objectclass: top
objectclass: dcObject
objectclass: organization
o: Guessant
dc: guessant

dn: cn=Manager,dc=guessant,dc=org
objectclass: organizationalRole
cn: Manager

Create this file directly in OpenLDAP installation directory or
anywhere after adding the installation directory to the system PATH.

Load entries in directory (adjust slapd.conf and init.ldif files path as needed):

slapadd -f slapd.conf -l init.ldif

The

slapadd

command bypasses the LDAP server and applies changes directly to the BDB database. Restart the server to flush its cache.

Try a new connection with Ldap Browser to check the new entries. A
named (i.e. not Anonymous) connection is necessary to add or change
entries: uncheck Anonymous Bind and provide User Info.

According to example configuration, User DN is

cn=Manager

, check

append base DN

and use password

secret

Install as an NT service
In order to have the server always available, register OpenLDAP as a
Windows service. If the option was not checked at installation time,
use the following command:

slapd install

And to remove the service:

slapd remove

OpenLDAP daemon parameters can be modified by creating registry
keys. Create a .reg file with the following content en register keys by
double clicking on it:

REGEDIT4

[HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/OpenLDAP-slapd/Parameters]
"DebugLevel"=dword:00000000
"ConfigFile"=".//slapd.conf"
"Urls"="ldap:///"

See README.txt file included in the distribution for more information on registry keys search algorithm.

DebugLevel

is used to change trace level,

ConfigFile

is the configuration file path and

Urls

matches the syntax of the -h command line option.

For example, set

Urls

ldap://localhost:port/

to set a different listen port.

发表于 @ 2007年06月20日 17:57:00|评论(loading...
AddFeedbackCountStack("1659717")
)|编辑

新一篇: vsftpd安装 | 旧一篇: 计算机编程英语词汇

评论：没有评论。

发表评论

姓名：请输入名字

主页：

校验码：

检验码无效!

看不清,换一张

请输入评论

LoadFeedbackCount();//加载评论
document.write("<img src='http://counter.csdn.net/pv.aspx?id=24' border=0 width=0 height=0>");// 计数器

Csdn Blog version 3.1a
Copyright ©
gzaqq

内容来自用户分享和网络整理，不保证内容的准确性，如有侵权内容，可联系管理员处理

标签：

相关文章推荐

新的分享

章节导航