锘??xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/"><channel><title>&#x4E9A;&#x6D32;&#x5927;&#x7247;&#x5728;&#x7EBF;&#x89C2;&#x770B;&#x2C;&#x4E9A;&#x6D32;&#x6B27;&#x7F8E;&#x65E5;&#x97E9;&#x4E00;&#x533A;&#x4E8C;&#x533A;&#x4E09;&#x533A;&#x5728;&#x7EBF;&#x2C;&#x4E9A;&#x6D32;&#x6210;&#x41;&#x2228;&#x4EBA;&#x7247;&#x5929;&#x5802;&#x7F51;&#x65E0;&#x7801;</title><link>http://www.tkk7.com/jjshcc/category/53987.html</link><description>妗戝反钁¤緲昏瘧宸ヤ綔瀹ゆ槸騫垮窞甯?jìng)鏈�涓撲笟钁¤悇鐗欒緲昏瘧鏈烘瀯-www.puyufanyi.com-嬈㈣繋瀵繪壘Java,As400,Mainframe鐨勭寧澶磂ric_cc#qq.ccom(鎶?鎹㈡垚@)</description><language>zh-cn</language><lastBuildDate>Thu, 31 Oct 2013 20:08:44 GMT</lastBuildDate><pubDate>Thu, 31 Oct 2013 20:08:44 GMT</pubDate><ttl>60</ttl><item><title>浣跨敤IBM鐩綍鏈嶅姟榪涜 Linux 鐢ㄦ埛楠岃瘉</title><link>http://www.tkk7.com/jjshcc/archive/2013/10/31/405825.html</link><dc:creator>Eric_jiang</dc:creator><author>Eric_jiang</author><pubDate>Thu, 31 Oct 2013 01:45:00 GMT</pubDate><guid>http://www.tkk7.com/jjshcc/archive/2013/10/31/405825.html</guid><wfw:comment>http://www.tkk7.com/jjshcc/comments/405825.html</wfw:comment><comments>http://www.tkk7.com/jjshcc/archive/2013/10/31/405825.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.tkk7.com/jjshcc/comments/commentRss/405825.html</wfw:commentRss><trackback:ping>http://www.tkk7.com/jjshcc/services/trackbacks/405825.html</trackback:ping><description><![CDATA[<font color="#cccccc"><span style="color: #000000">綆�浠?/span><br /><br /><span style="color: #000000">杞婚噺綰х洰褰曡闂崗璁?(Lightweight Directory Access Protocol錛孡DAP) 鏄竴涓交閲忕駭鐨勫鎴鋒満-鏈嶅姟鍣ㄥ崗璁紝鐢ㄤ簬璁塊棶鐩綍鏈嶅姟錛屽挨鍏舵槸閭ｄ簺鍩轟簬 X.500 鐨勬湇鍔°�侷BM Directory Server 鏄竴涓疄鐜?LDAP 鍗忚鐨勬垚鐔熶駭鍝併�傝繎鏉ユ祦琛岀殑 Linux 鎻愪緵浜?jiǎn)涓�浜涚郴緇熺敤鎴烽獙璇佹柟娉曪紝鍖呮嫭鏈湴鏂囦歡銆丯IS銆丩DAP 鍜?PAM 鏈哄埗銆侺inux 鍙互涓轟笉鍚岀殑鏈嶅姟浣跨敤涓嶅悓鐨勯獙璇佹柟娉曘�?/span><br /><br /><span style="color: #000000">鏈枃浠嬬粛浜?jiǎn)濡備綍鋴社?IBM Directory Server 榪涜 Linux 鐢ㄦ埛楠岃瘉銆傛垜娌℃湁鍦ㄦ枃涓粙緇嶇浉鍏崇殑姒傚康錛?鍙傝�冭祫鏂?涓湁鐩稿叧鐨勮儗鏅祫鏂欍�?</span><br /><br /><span style="color: #000000">鎴戣綆＄悊鐨?Linux 緋葷粺涓?RedHat Linux 7.3錛孡DAP 鏈嶅姟鍣ㄦ槸 IBM Directory Server 5.1銆傚鏋滈渶瑕侊紝璇峰弬鑰?RedHat 鍜?IBM 鐨勭綉绔欐彁渚涚殑 Linux 鍜?Directory Server 5.1 瀹夎璇存槑銆?/span><br /><br /><br /><br /><br /><span style="color: #000000">閰嶇疆 Directory Server 5.1 鏈嶅姟鍣?/span><br /><br /><span style="color: #000000">鍦ㄤ嬌鐢?Directory Server 鏉ュ瓨鍌ㄦ?zhèn)ㄧ?Linux 緋葷粺鐢ㄦ埛淇℃伅涔嬪墠錛屾?zhèn)ㄩ渶瑕佸厛璁″垝鎮(zhèn)ㄧ殑緋葷粺鐢ㄦ埛緇撴瀯銆備緥濡傦紝鎴戝皢 Directory Server 5.1 鏈嶅姟鍣ㄥ畨瑁呭湪涓�涓崟鐙殑 Windows 2000 鏈嶅姟鍣ㄤ笂錛岃鍒掍簡(jiǎn)濡備笅鐨勭郴緇熺敤鎴風(fēng)粨鏋勶細(xì)</span><br /><br /><span style="color: #000000">o=ibm,c=cn</span><br /><span style="color: #000000">|-ou=csdl,o=ibm,c=cn</span><br /><span style="color: #000000">|-ou=gcl,ou=csdl,o=ibm,c=cn</span><br /><span style="color: #000000">|-uid=user1,ou=gcl,ou=csdl,o=ibm,c=cn</span><br /><span style="color: #000000">|-uid=user2,ou=gcl,ou=csdl,o=ibm,c=cn</span><br /><br /><br /><br /><br /><span style="color: #000000">浣跨敤浠ヤ笅姝ラ鏉ユ瀯寤鴻繖涓粨鏋勶細(xì)</span><br /><br /><span style="color: #000000">娣誨姞鍚庣紑銆傚仠姝?Directory Server 鏈嶅姟鍣紝鐒跺悗浣跨敤 ldapxcfg 娣誨姞涓�涓柊鐨勫悗緙�錛?o=ibm,c=cn 錛屽弬瑙?鍥?1 </span><br /><span style="color: #000000">鍥?1. 娣誨姞涓�涓柊鍚庣紑</span><br /><br /><br /><br /><br /><img style="cursor: hand" border="0" alt="Click here to open new window" src="http://www.ibm.com/developerworks/eserver/articles/linux_dir/IDScfg01.jpg" width="400" resized="true" /><br /><br /><span style="color: #000000">瀵煎叆 LDAP Data Interchange Format (LDIF) 鏂囦歡錛屼互鍙?qiáng)鍩烘湰缁撴瀯銆傜紪杈?LDIF 鏂囦歡錛屽畠瀹氫箟浜?jiǎn)鏍逛笓鏈夊悕绉?(distinguished name錛孌N) 鍜屽熀鏈粨鏋?DN錛屽涓嬫墍紺恒�?version: 1 </span><br /><br /><span style="color: #000000">dn: o=IBM,c=CN</span><br /><span style="color: #000000">objectclass: top</span><br /><span style="color: #000000">objectclass: organization</span><br /><span style="color: #000000">o: ibm</span><br /><br /><span style="color: #000000">dn: ou=CSDL,o=ibm,c=cn</span><br /><span style="color: #000000">ou: CSDL</span><br /><span style="color: #000000">objectclass: organizationalUnit</span><br /><span style="color: #000000">objectclass: top</span><br /><span style="color: #000000">description: China Software Development Lab</span><br /><span style="color: #000000">businessCategory: R&amp;D</span><br /><br /><span style="color: #000000">dn: ou=GCL,ou=CSDL,o=ibm,c=cn</span><br /><span style="color: #000000">ou: GCL</span><br /><span style="color: #000000">objectclass: organizationalUnit</span><br /><span style="color: #000000">objectclass: top</span><br /><span style="color: #000000">description: Globalization Certification Lab</span><br /><br /><br /><br /><br /><span style="color: #000000">浣跨敤 ldapxcfg 瀵煎叆 LDIF錛屽弬瑙?鍥?2銆?/span><br /><br /><br /><br /><br /><img style="cursor: hand" border="0" alt="Click here to open new window" src="http://www.ibm.com/developerworks/eserver/articles/linux_dir/IDScfg02.jpg" width="400" resized="true" /><br /><br /><span style="color: #000000">浣跨敤 Web 宸ュ叿 ldif2db 鏉ユ坊鍔犵敤鎴楓�傚垱寤轟竴涓柊鐢ㄦ埛鏉＄洰鏈変袱縐嶄笉鍚岀殑鏂規(guī)硶錛?</span><br /><span style="color: #000000">Web 宸ュ叿 </span><br /><span style="color: #000000">Directory Server 5.1 鎻愪緵浜?jiǎn)涓�涓?Web 搴旂敤紼嬪簭錛屽彲浠ラ儴緗插埌鐗瑰畾鐨勫簲鐢ㄧ▼搴忔湇鍔″櫒涓娿�傚畠榛樿浣跨敤 WebSphere Application Server 5.0 express銆傝繖涓伐鍏蜂負(fù)鐢ㄦ埛鎻愪緵浜?jiǎn)涓�涓弸濂界殑鐣岄潰鏉ュ府鎮(zhèn)ㄧ鐞?LDAP 淇℃伅銆?</span><br /><span style="color: #000000">鍛戒護(hù)琛屽伐鍏?</span><br /><span style="color: #000000">浣跨敤 ldif2db 鏉ュ鍏ユ潯鐩�備緥濡傦紝 </span><br /><span style="color: #000000">ldif2db -i oneEntry.ldif </span><br /><span style="color: #000000">涓嬮潰鐨勮繖涓緥瀛愪粙緇嶄簡(jiǎn)濡備綍浣跨敤鍛戒護(hù)宸ュ叿鏉ユ坊鍔犱竴涓柊鐢ㄦ埛銆?/span><br /><br /><span style="color: #000000">#oneEntry.ldif</span><br /><br /><span style="color: #000000">dn: uid=user1,ou=GCL,ou=CSDL,o=ibm,c=cn</span><br /><span style="color: #000000">loginShell: /bin/bash</span><br /><span style="color: #000000">memberUid: 900</span><br /><span style="color: #000000">gidNumber: 800</span><br /><span style="color: #000000">objectclass: posixGroup</span><br /><span style="color: #000000">objectclass: top</span><br /><span style="color: #000000">objectclass: posixAccount</span><br /><span style="color: #000000">objectclass: shadowAccount</span><br /><span style="color: #000000">uid: user1</span><br /><span style="color: #000000">uidNumber: 900</span><br /><span style="color: #000000">cn: user1</span><br /><span style="color: #000000">description: One user of system</span><br /><span style="color: #000000">homeDirectory: /home/user1</span><br /><span style="color: #000000">userpassword: password</span><br /><span style="color: #000000">ownerpropagate: TRUE</span><br /><span style="color: #000000">entryowner: access-id:UID=USER1,OU=GCL,OU=CSDL,O=IBM,C=CN</span><br /><br /><br /><br /><br /><span style="color: #000000">瀵逛簬 Linux 鐢ㄦ埛淇℃伅錛屽璞＄被搴旇鏄?posixAccount 銆傚皢鏈潯鐩殑 entryowner 璁劇疆涓虹敤鎴?#8220;鑷繁&#8221;錛岃繖鏍風(fēng)敤鎴峰氨鍙互淇敼瀵嗙爜銆傝浜?jiǎn)瑙ｆ洿澶氬叧浜?Directory Server ACL 鐨勪俊鎭紝璇烽槄璇?Directory Server 鏂囨。銆?</span><br /><br /><span style="color: #000000">娣誨姞鐢ㄦ埛瀹屾垚鍚庯紝鍚姩 Directory Server 鏈嶅姟鍣ㄦ潵寮�濮嬩負(fù) Linux 鐢ㄦ埛楠岃瘉鏈嶅姟銆?/span><br /><br /><br /><br /><br /><span style="color: #000000">Linux 涓婄殑閰嶇疆</span><br /><br /><span style="color: #000000">鍦?RedHat Linux 7.3 涓婏紝浠?root 韜喚鐧誨綍錛岀‘淇濆凡緇忓畨瑁呬簡(jiǎn)浠ヤ笅涓や釜杞歡鍖咃細(xì) </span><br /><br /><span style="color: #000000">openldap-2.0.23-4 </span><br /><span style="color: #000000">nss_ldap-185-1 </span><br /><span style="color: #000000">浣跨敤 #rpm -qa|grep ldap 鍛戒護(hù)鏉ユ鏌ュ凡瀹夎鐨?RPM銆傚鏋滄病鏈夊畨瑁呰繖涓や釜杞歡鍖咃紝閭ｄ箞鎸傝澆 RedHat 瀹夎鏄犲儚騫舵墽琛屼互涓嬪懡浠わ細(xì) </span><br /><span style="color: #000000">#rpm -ivh </span><pathtopkgs><span style="color: #000000">/openldap-2.0.23-4.rpm</span><br /><span style="color: #000000">#rpm -ivh </span><pathtopkgs><span style="color: #000000">/nss_ldap-185-1.rpm</span><br /><br /><span style="color: #000000">涓や釜杞歡鍖呭畨瑁呭畬鎴愬悗錛屾墦寮� /etc/ldap.conf 鏂囦歡鏉ュ仛涓�浜涢厤緗�備笅闈㈡槸涓�浜涚敤浜庨厤緗殑鍏抽敭鎸囦護(hù)銆?host 鎸囧畾 LDAP 鏈嶅姟鍣?IP/涓繪満鍚?</span><br /><span style="color: #000000">base 鎸囧畾 LDAP 瀹㈡埛鏈烘悳绱㈣搗鐐?</span><br /><span style="color: #000000">port 鎸囧畾 LDAP 鏈嶅姟鍣ㄧ鍙?</span><br /><span style="color: #000000">pam_filter 鎸囧畾 LDAP 瀹㈡埛鏈烘悳绱㈣繃婊ゅ櫒 </span><br /><span style="color: #000000">pam_login_attribute 鎸囧畾涓�涓敤鎴鋒潯鐩殑鐧誨綍灞炴�?</span><br /><span style="color: #000000">pam_password 鎸囧畾瀹㈡埛鏈哄瘑鐮佸搱甯屾柟娉?</span><br /><br /><br /><span style="color: #000000">涓嬮潰鐨勪緥瀛愭槸 ldap.conf 鏂囦歡鐨勯儴鍒嗗唴瀹廣�傚挨鍏舵敞鎰忛偅浜?鍔犵矖鐨勬寚浠ゃ�?</span><br /><br /><br /><span style="color: #000000"># @(#)$Id: ldap.conf,v 1.24 2001/09/20 14:12:26 lukeh Exp $</span><br /><span style="color: #000000">#</span><br /><span style="color: #000000"># This is the configuration file for the LDAP nameservice</span><br /><span style="color: #000000"># switch library and the LDAP PAM module.</span><br /><span style="color: #000000">#</span><br /><span style="color: #000000"># PADL Software</span><br /><span style="color: #000000"># </span></font><a  target="_blank"><font color="#000000"><span style="color: #000000">http://www.padl.com</span></font></a><br /><font color="#cccccc"><span style="color: #000000">#</span><br /><span style="color: #000000"># Your LDAP server. Must be resolvable without using LDAP.</span><br /><span style="color: #000000">#host 127.0.0.1</span><br /><br /><span style="color: #000000">host 192.168.0.188</span><br /><br /><span style="color: #000000"># The distinguished name of the search base.</span><br /><span style="color: #000000">#base dc=example,dc=com</span><br /><br /><span style="color: #000000">base o=IBM,c=CN</span><br /><br /><span style="color: #000000"># Another way to specify your LDAP server is to provide an</span><br /><span style="color: #000000"># uri with the server name. This allows to use</span><br /><span style="color: #000000"># Unix Domain Sockets to connect to a local LDAP Server.</span><br /><span style="color: #000000">#uri ldap://127.0.0.1/</span><br /><span style="color: #000000">#uri ldaps://127.0.0.1/ </span><br /><span style="color: #000000">#uri ldapi://%2fvar%2frun%2fldapi_sock/</span><br /><span style="color: #000000"># Note: %2f encodes the '/' used as directory separator</span><br /><span style="color: #000000"># The LDAP version to use (defaults to 3</span><br /><span style="color: #000000"># if supported by client library)</span><br /><span style="color: #000000">#ldap_version 3</span><br /><br /><span style="color: #000000"># The distinguished name to bind to the server with.</span><br /><span style="color: #000000"># Optional: default is to bind anonymously.</span><br /><span style="color: #000000">#binddn cn=proxyuser,dc=example,dc=com</span><br /><br /><span style="color: #000000"># The credentials to bind with. </span><br /><span style="color: #000000"># Optional: default is no credential.</span><br /><br /><span style="color: #000000"># The distinguished name to bind to the server with</span><br /><span style="color: #000000"># if the effective user ID is root. Password is</span><br /><span style="color: #000000"># stored in /etc/ldap.secret (mode 600)</span><br /><span style="color: #000000">#rootbinddn cn=manager,dc=example,dc=com</span><br /><br /><span style="color: #000000"># The port.</span><br /><span style="color: #000000"># Optional: default is 389.</span><br /><br /><span style="color: #000000">port 389</span><br /><br /><span style="color: #000000"># The search scope.</span><br /><span style="color: #000000">#scope sub</span><br /><span style="color: #000000">#scope one</span><br /><span style="color: #000000">#scope base</span><br /><span style="color: #000000"># Search timelimit</span><br /><span style="color: #000000">#timelimit 30</span><br /><span style="color: #000000"># Bind timelimit</span><br /><span style="color: #000000">#bind_timelimit 30</span><br /><span style="color: #000000"># Idle timelimit; client will close connections</span><br /><span style="color: #000000"># (nss_ldap only) if the server has not been contacted</span><br /><span style="color: #000000"># for the number of seconds specified below.</span><br /><span style="color: #000000">#idle_timelimit 3600</span><br /><br /><span style="color: #000000"># Filter to AND with uid=%s</span><br /><br /><span style="color: #000000">pam_filter objectclass=posixAccount</span><br /><br /><span style="color: #000000"># The user ID attribute (defaults to uid)</span><br /><br /><span style="color: #000000">pam_login_attribute uid</span><br /><br /><span style="color: #000000"># Search the root DSE for the password policy (works</span><br /><span style="color: #000000"># with Netscape Directory Server)</span><br /><span style="color: #000000">#pam_lookup_policy yes</span><br /><span style="color: #000000"># Check the 'host' attribute for access control</span><br /><span style="color: #000000"># Default is no; if set to yes, and user has no</span><br /><span style="color: #000000"># value for the host attribute, and pam_ldap is</span><br /><span style="color: #000000"># configured for account management (authorization)</span><br /><span style="color: #000000"># then the user will not be allowed to login.</span><br /><span style="color: #000000">#pam_check_host_attr yes</span><br /><span style="color: #000000"># Group to enforce membership of</span><br /><span style="color: #000000">#pam_groupdn cn=PAM,ou=Groups,dc=example,dc=com</span><br /><span style="color: #000000"># Group member attribute</span><br /><span style="color: #000000">#pam_member_attribute uniquemember</span><br /><span style="color: #000000"># Specify a minium or maximum UID number allowed</span><br /><span style="color: #000000">#pam_min_uid 0</span><br /><span style="color: #000000">#pam_max_uid 0</span><br /><span style="color: #000000"># Template login attribute, default template user</span><br /><span style="color: #000000"># (can be overriden by value of former attribute</span><br /><span style="color: #000000"># in user's entry)</span><br /><span style="color: #000000">#pam_login_attribute userPrincipalName</span><br /><span style="color: #000000">#pam_template_login_attribute uid</span><br /><span style="color: #000000">#pam_template_login nobody</span><br /><span style="color: #000000"># HEADS UP: the pam_crypt, pam_nds_passwd,</span><br /><span style="color: #000000"># and pam_ad_passwd options are no</span><br /><span style="color: #000000"># longer supported.</span><br /><br /><span style="color: #000000"># Do not hash the password at all; presume</span><br /><span style="color: #000000"># the directory server will do it, if</span><br /><span style="color: #000000"># necessary. This is the default.</span><br /><span style="color: #000000">#pam_password md5</span><br /><br /><span style="color: #000000">pam_password clear</span><br /><span style="color: #000000">ssl no</span><br /><span style="color: #000000">... </span><br /><span style="color: #000000">... </span><br /><br /><br /><br /><br /><br /><span style="color: #000000">淇濆瓨鎵�浣滅殑淇敼錛岀劧鍚庝嬌鐢?authconfig 鏉ュ惎鐢?LDAP 楠岃瘉錛屽嵆鎵ц #authconfig 銆?</span><br /><br /><span style="color: #000000">鍦?User Information Configuration 闈㈡澘涓紝鍙傝 鍥?3錛岄�変腑 Cache Information鍜?Use LDAP銆?</span><br /><br /><br /><span style="color: #000000">鍥?3. User Information Configuration</span><br /><br /><br /><br /><br /><img style="cursor: hand" border="0" alt="Click here to open new window" src="http://www.ibm.com/developerworks/eserver/articles/linux_dir/IDScfg03.jpg" width="400" resized="true" /><br /><br /><span style="color: #000000">鍦?Authentication Configuration 闈㈡澘涓紝閫変腑 Use LDAP Authentication錛屽弬瑙?鍥?4銆?</span><br /><br /><br /><span style="color: #000000">鍥?4. Authentication Configuration</span><br /><br /><br /><br /><br /><img style="cursor: hand" border="0" alt="Click here to open new window" src="http://www.ibm.com/developerworks/eserver/articles/linux_dir/IDScfg04.jpg" width="400" resized="true" /><br /><br /><span style="color: #000000">鐒跺悗杈撳叆 Ok銆侺inux 緋葷粺灝嗗紑濮嬪惎鐢?LDAP 楠岃瘉銆?</span><br /><span style="color: #000000">榪欎釜宸ュ叿灝嗕細(xì)鎶婃寚浠?pam_password 鐨勫�艱緗負(fù) md5銆備負(fù)浜?jiǎn)璁╃敤鎴峰彲浠ユ垚鍔熷滎C慨鏀瑰瘑鐮侊紝鎮(zhèn)ㄩ渶瑕佹墜宸ュ皢榪欎釜鎸囦護(hù)鍊艱緗負(fù)&#8220;clear&#8221;銆?/span><br /><br /><span style="color: #000000">鐜板湪鎴戜滑鍙互浣滀負(fù)淇℃伅瀛樺偍鍦?Directory Server 鏈嶅姟鍣ㄤ笂鐨勭敤鎴鋒潵鐧誨綍浜?jiǎn)銆備緥濡傦紝浠?user1 鐨勮韓浠界櫥褰曪細(xì)</span><br /><br /><br /><br /><br /><img style="cursor: hand" border="0" alt="Click here to open new window" src="http://www.ibm.com/developerworks/eserver/articles/linux_dir/IDScfg05.jpg" width="400" resized="true" /><br /><br /><span style="color: #000000">鍥犱負(fù)娌℃湁 user1 鐨勪富鐩綍錛屾墍浠ョ櫥褰?shell 鑷姩灝嗙洰褰曞垏鎹㈠埌&#8220;/&#8221;銆備負(fù)鏂逛究璧瘋鎴戜滑鍙互鎵嬪伐娣誨姞</span>鐢ㄦ埛涓葷洰褰曪細(xì) <br />#mkdir /home/user1<br />#cp /etc/skel/.* /home/user1<br />#chown -R user1:user1 /home/user1<br /><br /><br /><br /><br /><br />鐜板湪鍐嶆浠?user1 韜喚鐧誨綍錛屼笉鍐嶅嚭鐜拌鍛婏細(xì)<br /><br /><br /><br /><br /><img border="0" alt="Click here to open new window" src="http://www.ibm.com/developerworks/eserver/articles/linux_dir/IDScfg06.jpg" width="400" resized="true" /><br /><br />OK錛屽ソ鏋佷簡(jiǎn)! 鎴戜滑宸茬粡瀹炵幇浜?jiǎn)涓�涓熀鏈殑閰嶇疆錛屽彲浠ュ埄鐢?Directory Server 鏉ュ Linux 緋葷粺鐢ㄦ埛榪涜楠岃瘉銆傚洜涓?Linux 鍜?Directory Server 閮芥敮鎸?Secure Sockets Layer (SSL)錛屾墍浠ユ垜浠彲浠ュ仛鏇存繁鍏ョ殑閰嶇疆浠ユ彁楂樼郴緇熺殑瀹夊叏鎬с�?</font><!-- 姝ｆ枃end --><br /><img src ="http://www.tkk7.com/jjshcc/aggbug/405825.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.tkk7.com/jjshcc/" target="_blank">Eric_jiang</a> 2013-10-31 09:45 <a href="http://www.tkk7.com/jjshcc/archive/2013/10/31/405825.html#Feedback" target="_blank" style="text-decoration:none;">鍙戣〃璇勮</a></div>]]></description></item><item><title>濡備綍璁劇疆涓�涓熀鏈殑OpenLDAP Server</title><link>http://www.tkk7.com/jjshcc/archive/2013/10/31/405824.html</link><dc:creator>Eric_jiang</dc:creator><author>Eric_jiang</author><pubDate>Thu, 31 Oct 2013 01:34:00 GMT</pubDate><guid>http://www.tkk7.com/jjshcc/archive/2013/10/31/405824.html</guid><wfw:comment>http://www.tkk7.com/jjshcc/comments/405824.html</wfw:comment><comments>http://www.tkk7.com/jjshcc/archive/2013/10/31/405824.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.tkk7.com/jjshcc/comments/commentRss/405824.html</wfw:commentRss><trackback:ping>http://www.tkk7.com/jjshcc/services/trackbacks/405824.html</trackback:ping><description><![CDATA[<p>涓�. 鐩殑&nbsp; </p>
<p>鏈枃鏃ㄥ湪浠嬬粛濡備綍瀹夎OpenLDAP騫朵笖璁劇疆涓�涓叕鍙稿唴閮ㄧ殑闆嗕腑鍖栫殑閭歡鍦板潃钖勬湇鍔″櫒渚涘鎴風(fēng)鏌ヨ銆?nbsp; <br />鍩烘湰涓婏紝OpenLDAPg榪樺簲鐢ㄥ湪鍏跺畠璁稿鏂歸潰錛岃薄闆嗕腑鍖栫殑鐢ㄦ埛甯愬彿楠岃瘉鏈嶅姟鍣?浣嗛偖浠跺湴鍧�钖勬煡璇㈡槸鏈�甯哥敤鐨勩�?nbsp; </p>
<p>浜? 瀹夎&nbsp; </p>
<p>浠?a >www.openldap.org</a>涓嬭澆鏈�鏂扮殑openldap杞歡鍖咃紝鎸夌収緙栬瘧鍜屽畨瑁呯殑姝ラ錛屼緷嬈¤繍琛岋細(xì) </p>
<p><br />#tar cvfz openldap-stable-20010524.tgz&nbsp; <br />#cd openldap-2.0.11&nbsp; <br />#./configure&nbsp; <br />#make depend&nbsp; <br />#make&nbsp; <br />#make test&nbsp; <br />#make install&nbsp; </p>
<p>鎴戠殑鎿嶄綔鐜鏄痳edhat 6.1錛屽鏋滄病鏈夐亣鍒頒換浣曢敊璇紝鏈�鍚庨粯璁ゅ畨瑁匧DAP鍚庡彴紼嬪簭slapd鍒扮洰褰?usr/local/libexec;閰嶇疆鏂囦歡鍦ㄧ洰褰?usr/local/etc/openldap/ 騫朵笖鏀懼悇縐峅penLDAP宸ュ叿 <br />ldapadd,ldapdelete,ldapmodify,ldapmodrdn,ldappasswd,ldapsearch <br />鍦ㄧ洰褰?usr/local/bin,榪愯鏃舵暟鎹簱鍦?usr/local/var/openldap-ldbm 銆?nbsp; </p>
<p><br />涓? 璁劇疆&nbsp; </p>
<p>1) 鏇存敼閰嶇疆鏂囦歡/usr/local/etc/openldap/slapd.conf&nbsp; <br />鍦╥nclude /usr/local/etc/openldap/schema/core.schema榪欒鍚庨潰鍔犱笂涓嬮潰鐨勮鍖呮嫭鎵�鏈夌殑鏂規(guī)銆?nbsp; </p>
<p>include /usr/local/etc/openldap/schema/corba.schema&nbsp; <br />include /usr/local/etc/openldap/schema/cosine.schema&nbsp; <br />include /usr/local/etc/openldap/schema/inetorgperson.schema&nbsp; <br />include /usr/local/etc/openldap/schema/java.schema&nbsp; <br />include /usr/local/etc/openldap/schema/krb5-kdc.schema&nbsp; <br />include /usr/local/etc/openldap/schema/misc.schema&nbsp; <br />include /usr/local/etc/openldap/schema/nadf.schema&nbsp; <br />include /usr/local/etc/openldap/schema/nis.schema&nbsp; <br />include /usr/local/etc/openldap/schema/openldap.schema&nbsp; </p>
<p>2) 鍦ㄦ枃浠秙lapd.conf鐨?ldbm database definitions"閮ㄥ垎鏇存敼鐩稿簲鐨?<br />suffix,rootdn琛屽涓?nbsp; </p>
<p>database ldbm&nbsp; <br />suffix "o=yourdomain,c=us"&nbsp; <br />rootdn "cn=root,o=yourdomain,c=us"&nbsp; <br />rootpw secret&nbsp; <br />directory /usr/local/var/openldap-ldbm&nbsp; </p>
<p>鏈夊悇縐嶆牸寮忎綘鍙互鐢紝榪欓噷鎴戠敤鐨勬槸o=yourdomain,c=us 璇存槑浣犵殑鍏徃鍩熷悕鍜屾墍鍦ㄧ殑鍥藉鎴栧湴鍖簉ootdn鐨勬牸寮忓畨瑁呭悗榛樿涓篶n=Manager,榪欓噷鏀逛負(fù)root瀹屽叏鏄嚜宸辯殑鍠滃ソ,榪欐牱絎﹀悎Unix/Linux涓璻oot鍏鋒湁鏈�楂樻潈闄愮殑浼犵粺銆?nbsp; </p>
<p>3) 鐜板湪鍙互鍚姩slapd浜?jiǎn)锛寴q愯/usr/local/libexec/slapd 銆?nbsp; </p>
<p>鍙互鑰冭檻鎶?usr/local/bin and /usr/local/libexec鍔犲埌鎼滅儲(chǔ)璺緞涓紝鍗沖姞鍒?etc/profile涓殑PATH琛?&nbsp; <br />PATH="$PATH:/usr/X11R6/bin:/usr/local/bin:/usr/local/libexec"&nbsp; <br />榪欐牱涓嬫鐧誨綍鍚庡彧闇�閿叆 slapd 銆?nbsp; </p>
<p>4) 嫻嬭瘯ldap server鏄惁姝ｅ父宸ヤ綔銆?nbsp; <br />榪愯涓嬮潰鐨勫懡浠ゆ鏌ユ槸鍚︽湁鐩稿簲鐨勮緭鍑恒�?nbsp; </p>
<p>#ldapsearch -x -b 'o=yourdomain,c=us' '(objectclass=*)'&nbsp; </p>
<p><br />5) 緙栬緫.ldif鏂囨湰鏂囦歡錛岀敤ldapadd娣誨姞璁板綍榪涘叆LDAP鏁版嵁搴撱�?nbsp; <br />鏂囦歡鍐呭濡備笅錛?nbsp; </p>
<p>dn: o=yourdomain,c=us&nbsp; <br />objectclass: dcobject&nbsp; <br />objectclass: organization&nbsp; <br />o: yourdomain&nbsp; <br />dc: yourdomain&nbsp; </p>
<p>dn: cn=Jephe Wu,o=yourdomain,c=us&nbsp; <br />objectclass: inetorgperson&nbsp; <br />cn: Jephe Wu&nbsp; <br />sn: Wu&nbsp; <br />mail: <a href="&#109;&#97;&#105;&#108;&#116;&#111;&#58;&#106;&#101;&#112;&#104;&#101;&#95;&#119;&#117;&#64;&#121;&#111;&#117;&#114;&#100;&#111;&#109;&#97;&#105;&#110;&#46;&#99;&#111;&#109;">jephe_wu@yourdomain.com</a>&nbsp; </p>
<p><br />......more users......&nbsp; </p>
<p>渚濇綾繪帹錛屾坊鍔犳瘡涓漢鐨勮褰曡繘鍏ヨ鏂囦歡涓紝娉ㄦ剰瀵硅薄綾誨瀷 inetorgperson 鑷沖皯蹇呴』瑕佹湁cn鍜宻n,榪欓噷鎴戜滑鐢╟n,sn,mail涓夐」瀹氫箟,榪欏鎴戜滑鐨勯偖浠跺湴鍧�钖勫姛鑳芥潵璇村凡緇忚凍澶熴�備綘榪樺彲浠ュ畾涔夎薄mobile, homephone,pager......絳夌瓑銆?nbsp; </p>
<p>鐒跺悗鐢ㄤ笅闈㈢殑鍛戒護(hù)娣誨姞涓婇潰鐨?ldif鏂囦歡榪涘叆LDAP鏁版嵁搴?nbsp; </p>
<p>#ldapadd -x -D "cn=root,o=yourdomain,c=us" -w secret -f <br />"yourldiffilename"&nbsp; </p>
<p>娉細(xì)涓婇潰鐨勬枃浠剁殑絎竴閮ㄥ垎"dn: o=yourdomain,c=us"鏄繀欏葷殑錛屽惁鍒欎笉鑳芥坊鍔犳暟鎹�?nbsp; <br />鐢ㄤ綘鐨勫叕鍙哥殑鍩熷悕鏇挎崲涓婇潰鐨?yourdomain"銆?nbsp; </p>
<p>6) 璁劇疆Outlook Express, 鍏佽鐢↙DAP鏈嶅姟鍣ㄦ煡璇㈤偖浠跺湴鍧�銆?nbsp; </p>
<p>"宸ュ叿/甯愬彿/娣誨姞--鐩綍鏈嶅姟"錛屽～鍏ヤ綘鐨勬湇鍔″櫒鐨処P鍦板潃鎴栬�呬富鏈哄叏縐板煙鍚嶏紝鍦ㄤ笅涓�涓睆騫曚腑閫墆es浠ュ厑璁哥敤鐩綍鏈嶅姟鏉ユ煡璇㈠湴鍧�錛屾渶鍚庡湪"鐩綍鏈嶅姟"鏍忎腑閫変腑鍒氭墠璁劇疆鐨勯」鐩嚮&#8220;灞炴�?楂樼駭",鍦?鎼滅儲(chǔ)搴?涓～鍏?nbsp; <br />"o=yourdomain,c=us" 銆?nbsp; <br />Netscape璇鋒牴鎹笂闈㈢殑淇℃伅璁劇疆鐩稿簲鐨勯�夐」銆?nbsp; </p>
<p>鍥? 甯歌浣跨敤闂&nbsp; </p>
<p>1) 鑳藉惎鍔╯lapd 娌℃湁闂錛屼絾涓嶈兘娣誨姞鏁版嵁搴擄紝榪愯ldapadd娣誨姞鏃跺嚭閿?"ldap_bind:cannot contact LDAP Server" 銆?nbsp; <br />絳? 鏈�鍙兘鐨勫師鍥犳槸鍦?etc/hosts涓病鏈?27.0.0.1 localhost欏圭洰銆?nbsp; </p>
<p>2) 娉ㄦ剰鏌ヨ欏哄簭: 濡傛灉鍦∣utlook Express鐨勫湴鍧�钖勪腑鏈夊唴瀹癸紝鍒欐鏌ュ湴鍧�鏃跺湴鍧�钖勪紭 鍏堬紝濡傛灉鍦ㄦ湰鍦板湴鍧�钖勪腑鎵句笉鍒扮浉搴旇褰曪紝鐒跺悗鍐嶆煡璇DAP鏈嶅姟鍣ㄣ�?nbsp; </p>
<p>3) 鐢ㄤ笅闈㈢殑鍛戒護(hù)紜俊瀹㈡埛绔笌LDAP鏈嶅姟鍣ㄦ湁閫氳,鍦ㄦ湇鍔″櫒榪愯涓嬮潰鐨勫懡浠わ紝鐒跺悗鍦∣E涓祴璇曟鏌ュ湴鍧�錛屼綘灝嗕細(xì)寰楀埌鏌ヨLDAP鏁版嵁搴撶殑榪炴帴榪囩▼鐨勮緭鍑恒�?nbsp; </p>
<p># tcpdump port 389 </p> <img src ="http://www.tkk7.com/jjshcc/aggbug/405824.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.tkk7.com/jjshcc/" target="_blank">Eric_jiang</a> 2013-10-31 09:34 <a href="http://www.tkk7.com/jjshcc/archive/2013/10/31/405824.html#Feedback" target="_blank" style="text-decoration:none;">鍙戣〃璇勮</a></div>]]></description></item></channel></rss>                                                                                                                               <footer>
<div class="friendship-link">
<p>感谢您访问我们的网站，您可能还对以下资源感兴趣：</p>
<a href="http://www.tkk7.com/" title="&#20122;&#27954;&#97;&#118;&#25104;&#20154;&#29255;&#22312;&#32447;&#35266;&#30475;">&#20122;&#27954;&#97;&#118;&#25104;&#20154;&#29255;&#22312;&#32447;&#35266;&#30475;</a>

<div class="friend-links">


</div>
</div>

</footer>

主站蜘蛛池模板：
<a href="http://www-c559.com" target="_blank">亚洲视频精品在线观看</a>|
<a href="http://hn283.com" target="_blank">在线日韩日本国产亚洲</a>|
<a href="http://szzdjl.com" target="_blank">免费大片av手机看片</a>|
<a href="http://mychjp.com" target="_blank">婷婷精品国产亚洲AV麻豆不片</a>|
<a href="http://zdxxxx.com" target="_blank">成人人观看的免费毛片</a>|
<a href="http://cqtchtwq.com" target="_blank">免费精品一区二区三区第35</a>|
<a href="http://1111xxxx.com" target="_blank">亚洲AV性色在线观看</a>|
<a href="http://zaidongmaixi.com" target="_blank">精品亚洲一区二区</a>|
<a href="http://lzlcp.com" target="_blank">伊人亚洲综合青草青草久热</a>|
<a href="http://www-006688.com" target="_blank">13一14周岁毛片免费</a>|
<a href="http://mp4888.com" target="_blank">一级毛片免费视频</a>|
<a href="http://www19977.com" target="_blank">在线观看人成视频免费无遮挡</a>|
<a href="http://vvihh.com" target="_blank">亚洲欧洲无码一区二区三区</a>|
<a href="http://cqyouyongpx.com" target="_blank">久久精品国产精品亚洲毛片</a>|
<a href="http://9haolc.com" target="_blank">亚洲乱码精品久久久久..</a>|
<a href="http://txa6.com" target="_blank">四虎www免费人成</a>|
<a href="http://ziniurj.com" target="_blank">日韩高清在线免费看</a>|
<a href="http://499k.com" target="_blank">日本成人在线免费观看</a>|
<a href="http://6777s.com" target="_blank">国产在线a免费观看</a>|
<a href="http://minliusoft.com" target="_blank">希望影院高清免费观看视频</a>|
<a href="http://ziguang1688.com" target="_blank">香港a毛片免费观看</a>|
<a href="http://222941.com" target="_blank">亚洲精品在线免费看</a>|
<a href="http://788qj.com" target="_blank">国产福利在线免费</a>|
<a href="http://2h6m.com" target="_blank">国产在线观看免费视频播放器</a>|
<a href="http://wwwbi757.com" target="_blank">大地资源在线观看免费高清</a>|
<a href="http://yuntao360.com" target="_blank">国产麻豆视频免费观看</a>|
<a href="http://bjgelinhotel.com" target="_blank">一二三四在线观看免费高清中文在线观看
</a>|
<a href="http://bovch.com" target="_blank">亚洲午夜久久久久久久久久</a>|
<a href="http://bisi666.com" target="_blank">亚洲毛片网址在线观看中文字幕
</a>|
<a href="http://hnmeiankj.com" target="_blank">亚洲成人福利网站</a>|
<a href="http://ningxialanh.com" target="_blank">亚洲国产精品线观看不卡</a>|
<a href="http://3x79.com" target="_blank">亚洲免费综合色在线视频</a>|
<a href="http://huahui1866.com" target="_blank">亚洲成a人无码亚洲成www牛牛</a>|
<a href="http://haodiaose35pao.com" target="_blank">伊人久久亚洲综合影院首页</a>|
<a href="http://05942688.com" target="_blank">亚洲人成网站18禁止</a>|
<a href="http://6668889.com" target="_blank">在线观看免费播放av片</a>|
<a href="http://dd99com.com" target="_blank">欧洲一级毛片免费</a>|
<a href="http://www222yy.com" target="_blank">免费在线观看亚洲</a>|
<a href="http://df8848.com" target="_blank">亚洲免费视频网站</a>|
<a href="http://kj555888.com" target="_blank">一级午夜免费视频</a>|
<a href="http://shmtweld.com" target="_blank">免费观看无遮挡www的视频
</a>|
<script>
(function(){
    var bp = document.createElement('script');
    var curProtocol = window.location.protocol.split(':')[0];
    if (curProtocol === 'https') {
        bp.src = 'https://zz.bdstatic.com/linksubmit/push.js';
    }
    else {
        bp.src = 'http://push.zhanzhang.baidu.com/push.js';
    }
    var s = document.getElementsByTagName("script")[0];
    s.parentNode.insertBefore(bp, s);
})();
</script>
</body>