
O-2 Setting Up Your Environment to Work with LDAP Version 3
LX Series Configuration Guide
In the /usr/local/etc/openldap directory, there is a
slapd.conf file. The SLAPD daemon reads the contents of
the slapd.conf file at startup. MAN pages for slapd and
slapd.conf are available and contain vital information.
There is also a schema sub-directory. MRV requires that
certain schemas be added to the slapd.conf file (see the
provided example of the slapd.conf file below).
3. In a Linux environment, invoke SLAPD using one of the
following methods:
• Invoke SLAPD from the command line using slapd -h
(with the appropriate ldap or ldaps url).
• Use the /etc/init.d/ldap start command.
In both cases, the slapd.conf file is parsed and the SLAPD
daemon is invoked. Please consult that file for particulars.
L There is also an ldap.conf file, which can be used to
test LDAP on the server itself with ldap commands,
such as ldapsearch. MRV does not use this file.
4. You must also configure the database for UIDs (User IDs)
and DNs (Distinguished Names) with whatever tool is
appropriate. One such tool is Phpldapadmin, a Web-based
LDAP browser to manage your LDAP server. You can
download this at http://phpldapadmin.sourceforge.net/.
5. You must have valid certificates on the LDAP server, as well
as a client certificate on the LX. You can create these
certificates on the server using openssl commands or a
shell script tool called CA.sh. Pointers to these certificates
are configured in the slapd.conf (see below in the
example slapd.conf) file. CA.sh is in the apps sub-
directory of the OpenSSL package. OpenSSL must also be
installed on the LDAP server. Go to http://
www.openssl.org/ for that software package. Note that the
LX is currently at OpenSSL version 0.9.7l.
Komentáře k této Příručce