• Potentially running out of randomness.

(Usual caveats; stuff might have changed, pay attention, etc)

Install slapd, and optionally ldap-utils and ldapvi (should you want to be able to try it out from the server). The slapd package attempts to be helpful, asking a bunch of configuration questions and starting the service. Curiously, I didn't see the “don't configure slapd for me” as one of the options first time around and needed to reconfigure the package. Say “yes” to “Omit OpenLDAP server configuration?”.

piper:~# /etc/init.d/slapd stop
piper:~# dpkg-reconfigure slapd

Keep a copy of the default configuaration in case someone wants to see how Debian configures stuff, and copy across the main configuration file, the SSL files and the schema files that don't ship with OpenLDAP. (You might want to check this stuff, as some of it can probably be chucked.)

piper:~# cd /etc/ldap
piper:/etc/ldap# cp slapd.conf slapd.conf.dpkg
piper:/etc/ldap# mkdir -p /etc/ssl/certs

root@baker:~# cd /etc/ldap
root@baker:/etc/ldap# scp slapd.conf root@piper:/etc/ldap
root@baker:/etc/ldap# scp /etc/ssl/certs/ldapcert.pem /etc/ssl/certs/ldapkey.pem  root@piper:/etc/ssl/certs
root@baker:/etc/ldap# scp /etc/ssl/cacert.pem  root@piper:/etc/ssl/
root@baker:/etc/ldap/schema# scp amd.schema courier.schema krb5-kdc.schema tardis.schema root@piper:/etc/ldap/schema