The Virtualization Cookbook for SLES 10 SP2 - z/VM - IBM

Complete!
OpenLDAP should now be installed on LINUX02.
11.2.2 Configuring the OpenLDAP server
Any detailed description of LDAP is outside the scope of this book. Rather, short
configuration recommendations are given in this section.
There are two important configuration values that must be chosen.
1. The suffix or base distinguished name of the LDAP Domain Information Tree (DIT) - the
most common suffix is to use your company’s DNS name.
2. The LDAP administrator or root name and password.
Perform the following steps:
► Choose an administrative password and run the slappasswd command which displays an
encrypted version of it. The output of this command will be used shortly in a configuration
file so you may want to make a copy of it.
# slappasswd
New password: lnx4vm
Re-enter new password: lnx4vm
{SSHA}6KT4R+YjZqDidFUNGUa4jrWFGaqEFfkV
► The OpenLDAP server configuration file that will contain the LDAP manager (root)
password is /etc/openldap/slapd.d/cn=config/olcDatabase={1}bdb.ldif. Make a
backup copy of that file:
# cd /etc/openldap/slapd.d/cn=config
# cp olcDatabase={1}bdb.ldif olcDatabase={1}bdb.ldif.orig
► Edit the file and add one line to set the LDAP manager’s password. Use the variable
olcRootPW and set the password to the output of the previous slappasswd command:
# vi olcDatabase={1}bdb.ldif
dn: olcDatabase={1}bdb
objectClass: olcDatabaseConfig
objectClass: olcBdbConfig
olcDatabase: {1}bdb
olcSuffix: dc=my-domain,dc=com
olcAddContentAcl: FALSE
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootDN: cn=Manager,dc=my-domain,dc=com
olcRootPW: {SSHA}6KT4R+YjZqDidFUNGUa4jrWFGaqEFfkV
olcMonitoring: TRUE
olcDbDirectory: /var/lib/ldap
...
► Save the file. Your LDAP server should now be minimally configured.
Start the LDAP service
To start the LDAP server, perform the following steps:
► Start LDAP at boot time with the chkconfig command and for this session with the
service command:
# chkconfig slapd on
# service slapd start
174 The Virtualization Cookbook for RHEL 6