在ubuntu上安裝OpenLDAP

參考資料：
https://help.ubuntu.com/11.04/serverguide/C/openldap-server.html
https://help.ubuntu.com/10.04/serverguide/C/openldap-server.html

1. 安裝OpenLDAP的daemon程式 slapd 及 ldap-utils
   sudo apt-get install slapd ldap-utils
2. 再加入一些schema的檔案：
   sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif
   sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif
   sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif
   在ubuntu11.04版中，應該已加入以上三個schema，所以會出現 Duplicate attributeType的訊息。
3. 建立以下的LDIF檔案內容(backend.example.com.ldif)，將檔案存放在自行指定的位置：
   # Load dynamic backend modules
   dn: cn=module,cn=config
   objectClass: olcModuleList
   cn: module
   olcModulepath: /usr/lib/ldap
   olcModuleload: back_hdb
   
   # Database settings
   dn: olcDatabase=hdb,cn=config
   objectClass: olcDatabaseConfig
   objectClass: olcHdbConfig
   olcDatabase: {1}hdb
   olcSuffix: dc=example,dc=com
   olcDbDirectory: /var/lib/ldap
   olcRootDN: cn=admin,dc=example,dc=com
   olcRootPW: secret
   olcDbConfig: set_cachesize 0 2097152 0
   olcDbConfig: set_lk_max_objects 1500
   olcDbConfig: set_lk_max_locks 1500
   olcDbConfig: set_lk_max_lockers 1500
   olcDbIndex: objectClass eq
   olcLastMod: TRUE
   olcDbCheckpoint: 512 30
   olcAccess: to attrs=userPassword by dn="cn=admin,dc=example,dc=com" write by anonymous auth by self write by * none
   olcAccess: to attrs=shadowLastChange by self write by * read
   olcAccess: to dn.base="" by * read
   olcAccess: to * by dn="cn=admin,dc=example,dc=com" write by * read
4. 使用以下指令，將backend.example.com.ldif新增到LDAP中：
   

   sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.example.com.ldif

5. 建立以下的LDIF檔案內容(frontend.example.com.ldif)，將檔案存放在自行指定的位置：
   

   # Create top-level object in domain
   dn: dc=example,dc=com
   objectClass: top
   objectClass: dcObject
   objectclass: organization
   o: Example Organization
   dc: Example
   description: LDAP Example 
   
   # Admin user.
   dn: cn=admin,dc=example,dc=com
   objectClass: simpleSecurityObject
   objectClass: organizationalRole
   cn: admin
   description: LDAP administrator
   userPassword: secret
   
   dn: ou=people,dc=example,dc=com
   objectClass: organizationalUnit
   ou: people
   
   dn: ou=groups,dc=example,dc=com
   objectClass: organizationalUnit
   ou: groups
   
   dn: uid=john,ou=people,dc=example,dc=com
   objectClass: inetOrgPerson
   objectClass: posixAccount
   objectClass: shadowAccount
   uid: john
   sn: Doe
   givenName: John
   cn: John Doe
   displayName: John Doe
   uidNumber: 1000
   gidNumber: 10000
   userPassword: password
   gecos: John Doe
   loginShell: /bin/bash
   homeDirectory: /home/john
   shadowExpire: -1
   shadowFlag: 0
   shadowWarning: 7
   shadowMin: 8
   shadowMax: 999999
   shadowLastChange: 10877
   mail: john.doe@example.com
   postalCode: 31000
   l: Toulouse
   o: Example
   mobile: +33 (0)6 xx xx xx xx
   homePhone: +33 (0)5 xx xx xx xx
   title: System Administrator
   postalAddress: 
   initials: JD
   
   dn: cn=example,ou=groups,dc=example,dc=com
   objectClass: posixGroup
   cn: example
   gidNumber: 10000
   

6. 使用以下指令，將frontend.example.com.ldif新增到LDAP中：
   

   sudo ldapadd -x -D cn=admin,dc=example,dc=com -W -f frontend.example.com.ldif
   

7. 使用ldapsearch測試一下
   ldapsearch -xLLL -b "dc=example,dc=com" uid=john sn givenName cn