Ldap notes: Difference between revisions
From Federal Burro of Information
Jump to navigationJump to search
(Created page with "=== mod_authz_ldap config === (with zimbra) <pre> LoadModule authz_ldap_module modules/mod_authz_ldap.so <IfModule mod_authz_ldap.c> <Location /private> # AuthzLDAPE...") |
No edit summary |
||
| (4 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
=== mod_authz_ldap config | == Searches == | ||
/opt/zimbra/bin/ldapsearch -x -H 'ldap://server:389' -w X -D uid=zimbra,cn=admins,cn=zimbra -b '' '(objectclass=zimbraAccount)' | |||
/opt/zimbra/bin/ldapsearch -x -H 'ldap://server:389' -w X -D uid=zimbra,cn=admins,cn=zimbra -b '' '(uid=david.thornton)' | |||
== mod_authz_ldap config == | |||
(with zimbra) | (with zimbra) | ||
| Line 15: | Line 21: | ||
AuthzLDAPBindPassword X | AuthzLDAPBindPassword X | ||
AuthzLDAPServer server | AuthzLDAPServer server | ||
AuthzLDAPUserBase ou=people,dc=domain,dc=ca | # Comment out to search the hwole DIT | ||
# AuthzLDAPUserBase ou=people,dc=domain,dc=ca | |||
AuthzLDAPUserKey zimbraMailDeliveryAddress | AuthzLDAPUserKey zimbraMailDeliveryAddress | ||
AuthzLDAPUserScope subtree | AuthzLDAPUserScope subtree | ||
| Line 30: | Line 37: | ||
</pre> | </pre> | ||
== ldapdiff == | |||
* https://launchpad.net/ldapdiff | |||
== LDAP seeAlso == | |||
[root@ldap-01 dthornton]# ldapadd -a -c -f /home/dthornton/user.ldif -H ldap:/// -D "cn=Manager,dc=domain,dc=ca" -W | |||
Enter LDAP Password: | |||
adding new entry "uid=user,ou=People,dc=domain,dc=ca" | |||
ldap_add: Invalid syntax (21) | |||
additional info: seeAlso: value #0 invalid per syntax | |||
[root@ldap-01 dthornton]# | |||
Latest revision as of 15:25, 12 March 2013
Searches
/opt/zimbra/bin/ldapsearch -x -H 'ldap://server:389' -w X -D uid=zimbra,cn=admins,cn=zimbra -b '(objectclass=zimbraAccount)'
/opt/zimbra/bin/ldapsearch -x -H 'ldap://server:389' -w X -D uid=zimbra,cn=admins,cn=zimbra -b '(uid=david.thornton)'
mod_authz_ldap config
(with zimbra)
LoadModule authz_ldap_module modules/mod_authz_ldap.so
<IfModule mod_authz_ldap.c>
<Location /private>
# AuthzLDAPEngine on
AuthzLDAPBindDN uid=zimbra,cn=admins,cn=zimbra
AuthzLDAPBindPassword X
AuthzLDAPServer server
# Comment out to search the hwole DIT
# AuthzLDAPUserBase ou=people,dc=domain,dc=ca
AuthzLDAPUserKey zimbraMailDeliveryAddress
AuthzLDAPUserScope subtree
AuthzLDAPMethod ldap
AuthType basic
AuthName "Zimbra"
AuthGroupFile /dev/null
require valid-user
</Location>
</IfModule>
ldapdiff
LDAP seeAlso
[root@ldap-01 dthornton]# ldapadd -a -c -f /home/dthornton/user.ldif -H ldap:/// -D "cn=Manager,dc=domain,dc=ca" -W
Enter LDAP Password:
adding new entry "uid=user,ou=People,dc=domain,dc=ca"
ldap_add: Invalid syntax (21)
additional info: seeAlso: value #0 invalid per syntax
[root@ldap-01 dthornton]#
