Differences

This shows you the differences between two versions of the page.

--- ldap_service [2006/02/25 15:32] – /* Installation */ _bacam
+++ ldap_service [2026/09/27 03:43] (current) – removed - external edit (Unknown date) 127.0.0.1
@@ Line 1: / Line 1: @@
-  *  Runs on [[baker]] - ''baker.tardis.ed.ac.uk''
-====== Issues ======
-  *  Potentially running out of randomness.
-====== Installation ======
-(Usual caveats; stuff might have changed, pay attention, etc)
-Install slapd, and optionally ldap-utils and ldapvi (should you want to be able to try it out from the server).
-The slapd package attempts to be helpful, asking a bunch of configuration questions and starting the service.  Curiously, I didn't see the "don't configure slapd for me" as one of the options first time around and needed to
-reconfigure the package.  Say "yes" to "Omit OpenLDAP server configuration?".
-<code>
-piper:~# /etc/init.d/slapd stop
-piper:~# dpkg-reconfigure slapd
-</code>
-Keep a copy of the default configuaration in case someone wants to see how Debian configures stuff, and copy across the main configuration file, the SSL files and the schema files that don't ship with OpenLDAP.  (You might want to check
-this stuff, as some of it can probably be chucked.  Actually, I just turfed krb5-kdc.schema because we don't use it and it suffered parsing errors.  An old piece of syntax in the configuration file needed fixed too.)
-<code>
-piper:~# cd /etc/ldap
-piper:/etc/ldap# cp slapd.conf slapd.conf.dpkg
-piper:/etc/ldap# mkdir -p /etc/ssl/certs
-root@baker:~# cd /etc/ldap
-root@baker:/etc/ldap# scp slapd.conf root@piper:/etc/ldap
-root@baker:/etc/ldap# scp /etc/ssl/certs/ldapcert.pem /etc/ssl/certs/ldapkey.pem  root@piper:/etc/ssl/certs
-root@baker:/etc/ldap# scp /etc/ssl/cacert.pem  root@piper:/etc/ssl/
-root@baker:/etc/ldap/schema# scp amd.schema courier.schema krb5-kdc.schema tardis.schema root@piper:/etc/ldap/schema
-</code>
-At this point it should start and stop without moaning about syntax errors.  If not, see if you can fix them.
-<code>
-piper:/etc/ldap# /etc/init.d/slapd start
-Starting OpenLDAP: running BDB recovery, slapd.
-piper:/etc/ldap# /etc/init.d/slapd stop
-Stopping OpenLDAP: slapd.
-</code>
-Now grab a recent backup, comment out the "search" and "result" lines at the end (because the backups are generated by ldapsearch, but we're going to import them with slapadd), clear out the old database and import the backup:
-<code>
-piper:/etc/ldap# cp <whereever>/backup-20060225.ldif /tmp/backup-20060225.ldif
-piper:/etc/ldap# vi /tmp/backup-20060225.ldif
-<comment out search and result lines near end>
-piper:/etc/ldap# cd /var/lib/ldap
-piper:/var/lib/ldap# mkdir old
-piper:/var/lib/ldap# mv * old
-mv: cannot move `old' to a subdirectory of itself, `old/old'
-piper:/var/lib/ldap# slapadd -l /tmp/backup-20060225.ldif
-piper:/var/lib/ldap# /etc/init.d/slapd start
-</code>
-Now you're ready to test it.