Implementing LDAP on Linux

If you are wanting to set up a Linux system, with either PAM or Samba3 to authenticate to a Windows Active Directory Server (ADS), the following links should be useful. If you get errors or have really advanced configuration needs, you'll probably still need to search Google a couple of times.

General links about LDAP can be found on that page.

ISPMan - central management for an ISP, using LDAP to store all domains/vhosts/users/settings/dns/etc

http://www.tldp.org/HOWTO/LDAP-HOWTO/index.html - the Linux LDAP howto

http://docsrv.sco.com/INT_DirectoryAG/contents.html - Book on OpenLDAP tools

http://linuxwiki.riverworth.com/index.php/LDAP_Authentication - LDAP Authentication

http://www.samba-tng.org/docs.html - Samba TNG homepage

http://www.mami.net/univr/tng-ldap/howto/ - Samba TNG and LDAP

http://www.deschner.de/gd/dual_samba.html - Run Samba TNG and HEAD on the same system

http://online.securityfocus.com/infocus/1563 - Connect Linux/UNIX systems to a Microsoft 2000 Active Directory Server

http://www.padl.com/Contents/Documentation.html - some good links and resources. (PADL = LDAP backwards)

http://www.ece.ubc.ca/~lucaf/ - example smb.conf, ldap.conf, nsswitch.conf, etc from a VanLUG presentation

http://www-1.ibm.com/servers/esdd/articles/linux_clust/ - Clustering of LDAP servers

http://www.ldapbrowser.com - Softerra, a nice LDAP GUI browser for Win32. Can download from http://download.com.com/3001-2356-8589915.html

http://phpldapadmin.sourceforge.net/ - Great web base ldap browser and editor (Debian package available)

http://nakedape.cc/wiki/index.cgi/LdapNotes - how to rebuild OpenLDAP indexes

http://www.mandrakesecure.net/en/docs/ldap-auth2.php - Using OpenLDAP for authentication

http://linsec.ca/bin/view/Main/OpenLDAPAuth - Same as above I think

http://nakedape.cc/wiki/index.cgi/LdapNotes - some handy crib notes

http://www.rudedog.org/auth_ldap/1.6/auth_ldap.html#examples - authentication module for Apache

http://www.openldap.org/lists/openldap-software/200402/msg00528.html - optimize and tune OpenLDAP for performance via database caching settings and so forth.

http://lists.snowman.net/pipermail/debian-openldap/2003-September/000880.html - what to do if slapd hangs after upgrading

Replication

A nice thread on Multi-mastering, clustering, etc: http://www.openldap.org/lists/openldap-software/200210/msg00427.html

To modify an LDAP record

Try something like this. Create a file called modify.ldif:

dn:     uid=user_domain_told,ou=users,ispmanDomain=domain.tld,dc=domain,dc=tld
changetype: modify
replace: loginShell
loginShell: /bin/bash

Then run it, like this:

ldapmodify -x -D "cn=root,dc=domain,dc=tld" -W -f ./modify.ldif

Linux docs

While searching for some performance tricks for OpenLDAP, I discovered this site:

http://www.kalamazoolinux.org/projects/awilliam/

Some very good HOWTOs in PDF format. The ones on LDAP and Linux Disk management seem to be of way higher quality then the typical docs at TLDP.org.

Corrupt LDAP database?

If your database seems corrupt, all is not lost. First shut down slapd, then run:

db4.1_recover -h /var/lib/ldap

Back to Networking or Linux or Samba