IT19115962 Lab-7 LDAP
IT19115962 Lab-7 LDAP
Lab 7-LDAP
Submitted to
Sri Lanka Institute of Information Technology
2021-06-30
Declaration
I certify that this report does not incorporate without acknowledgement, any material
previously submitted for a degree or diploma in any university, and to the best of my knowledge
and belief it does not contain any material previously published or written by another person,
except where due reference is made in text.
2
1.Stop all the running services.
# service dhcpd stop
# service named stop
3
2. Create a LDAP root password for administration purpose.
# slappasswd
# cd /etc/openldap/slapd.d/cn=config
4
# vi olcDatabase={2}hdb.ldif
Change the variables of "olcSuffix" and "olcRootDN" according to our domain as below.
olcSuffix: dc=dsnm,dc=sub olcRootDN: cn=Manager,dc=dsnm,dc=sub Add the
below three lines additionally in the same configuration file. olcRootPW:
{SSHA}YkyuLa30IaJ12yRIvOE7EGuHsbUS1INC olcTLSCertificateFile:
/etc/pki/tls/certs/dsnmldap.pem olcTLSCertificateKeyFile:
/etc/pki/tls/certs/dsnmldapkey.pem
5
4. Provide the Monitor privileges.
Open the file /etc/openldap/slapd.d/cn=config/olcDatabase={1}monitor.ldif and go to
the line start with olcAccess. Replace the value "dc=my-domain,dc=com" to
"dc=dsnm,dc=sub" as below.
6
Verify the configuration
#slaptest -u