slapd.conf
\u8ca0\u8cacslapd,slurpd,slap\u7cfb\u5217\u5de5\u5177\u7684\u7d44\u614b\u8cc7\u8a0a<\/p>\n\n\n\n
………….
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
\u4ee5\u4e0b\u662f\u5168\u57df\u5340\u6bb5\u53c3\u6578<\/p>\n\n\n\n
\u5f15\u7528schema
include \/usr\/local\/etc\/openldap\/schema\/core.schema<\/p>\n\n\n\n
\u8a2d\u5b9alog\u7b49\u7d1a
loglevel 296 \/\/\u6b64\u503c\u8868\u793a8(\u9023\u7dda\u7ba1\u7406),32(\u641c\u5c0b\u904e\u6ffe\u5668\u8655\u7406\u904e\u7a0b),256(\u9023\u7dda\u64cd\u4f5c\u53ca\u7d50\u679c\u7684\u7d71\u8a08)<\/p>\n\n\n\n
\u8a2d\u5b9apid\u548cargs file
pidfile \/usr\/local\/var\/slapd.pid
argsfile \/usr\/local\/var\/slapd.args<\/p>\n\n\n\n
\u8a2d\u5b9asasl\u7684\u9078\u9805
sasl-host
sasl-realm
sasl=secprops<\/p>\n\n\n\n
\u8a2d\u5b9atls\u7684\u9078\u9805
TLSCipherSuite
TLSCertificateFile
TLSCertifateKeyFile<\/p>\n\n\n\n
…….<\/p>\n\n\n\n
\u5176\u4ed6\u5b89\u5168\u76f8\u95dc\u9078\u9805
security \/\/\u6307\u5b9a\u4e00\u822c\u7684\u5b89\u5168\u5f37\u5ea6\u56e0\u5b50<\/p>\n\n\n\n
require value
value\u6709\u4ee5\u4e0b
none
authc
bind
LDAPv3
SASL
strong<\/p>\n\n\n\n
allow value
\u555f\u7528\u7279\u5b9a\u7684\u5b89\u5168\u7279\u6027,value\u6709\u4ee5\u4e0b
none \u9810\u8a2d\u503c
tls_2_anon \u5141\u8a31tls\u5f37\u8feb\u76ee\u524d\u7684session\u9032\u5165\u533f\u540d\u72c0\u614b<\/p>\n\n\n\n
disallow value
\u505c\u7528\u7279\u5b9a\u7684\u5b89\u5168\u7279\u6027,value\u6709\u4ee5\u4e0b
bind_v2 \u505c\u7528ldap2\u9023\u7d50
bind_anon \u505c\u7528\u533f\u540d\u9023\u7d50
bind_anon_cred dn\u7a7a\u767d\u5247\u505c\u7528\u533f\u540d\u9023\u7d50
bind_anon_dn dn\u975e\u7a7a\u767d\u5247\u505c\u7528\u533f\u540d\u9023\u7d50
bind_simple \u505c\u7528\u7c21\u6613\u9023\u7d50
bind_krbv4 \u505c\u7528kerberos4\u9023\u7d50
bind_authc \u7528\u6236\u7aef\u7d93\u8a8d\u8b49,\u5247\u505c\u7528starttls<\/p>\n\n\n\n
password-hash \/\/\u6307\u5b9a\u5c6c\u6027userpassword\u7684\u9810\u5b9a\u5bc6\u78bc\u52a0\u5bc6\u6a5f\u5236<\/p>\n\n\n\n
#######################################################################
# database definitions
#######################################################################
\u4ee5\u4e0b\u662f\u8cc7\u6599\u5eab\u5340\u6bb5\u53c3\u6578<\/p>\n\n\n\n
\u8a2d\u5b9a\u8cc7\u6599\u5eab,\u53ef\u9078\u64c7\u4ee5\u4e0b
bdb \u6548\u80fd\u8f03\u597d,\u5efa\u8b70\u4f7f\u7528
ldbm \u8f03\u820a\u7248\u7684bdb
passwd
shell \u4f7f\u7528\u5916\u90e8\u8cc7\u6599\u5eab
ex:
database bdb<\/p>\n\n\n\n
\u8a2d\u5b9aroot suffix(\u6839\u5c3e\u78bc)
suffix “dc=study,dc=net”<\/p>\n\n\n\n
\u8a2d\u5b9asuperuser
rootdn “cn=manager,dc=study,dc=net”
rootpw<\/p>\n\n\n\n
\u66f4\u65b0\u76f8\u95dc\u53c3\u6578
lastmod
readonly<\/p>\n\n\n\n
bdb\u8cc7\u6599\u5eab\u5c08\u5c6c\u53c3\u6578
directory \/var\/ldap\/study.net \/\/\u8a2d\u5b9a\u8cc7\u6599\u5eab\u6a94\u6848\u7684\u76ee\u9304
mode 0600 \/\/\u8a2d\u5b9a\u8cc7\u6599\u5eab\u6a94\u6848\u6b0a\u9650\u70ba0600
cachesize 3000 \/\/\u8cc7\u6599\u5eab\u8abf\u6821\u53c3\u6578<\/p>\n\n\n\n
\u8a2d\u5b9a\u7d22\u5f15\u7dad\u8b77\u7528\u53c3\u6578
\u683c\u5f0f\u70ba
index \u5c6c\u6027 \u7d22\u5f15\u985e\u578b
\u7d22\u5f15\u985e\u578b\u6709\u4ee5\u4e0b
approx \u8fd1\u4f3c\u6bd4\u5c0d
eq \u7cbe\u78ba\u6bd4\u5c0d
pres \u5b58\u5728\u6bd4\u5c0d
sub \u5b50\u5b57\u4e32\u6bd4\u5c0d
ex:
index objectClass eq \/\/\u6b64\u8a2d\u5b9a\u53ef\u63d0\u5347\u6548\u80fd
index uid pres,eq
index uidNumber pres,eq
index gidNumber pres,eq<\/p>\n\n\n\n
########################################
# permissions
#######################################<\/p>\n\n\n\n
acl\u53c3\u6578\u5982\u4e0b<\/p>\n\n\n\n
\u8a2d\u5b9aacl\u7528\u7684\u683c\u5f0f
access to \u5c0d\u8c61
by \u4f7f\u7528\u8005 \u5b58\u53d6\u7b49\u7d1a
ex:
access to *
by self write
by dn=”cn=Manager,dc=systw,dc=net” write
by * read<\/p>\n\n\n\n
\u6c92\u6709\u6307\u5b9aacl\u6642,\u9810\u8a2d\u5b58\u53d6\u7b49\u7d1a,\u683c\u5f0f\u70ba
defaultaccess \u5b58\u53d6\u7b49\u7d1a
ex:
defaultaccess read<\/p>\n\n\n\n
\u4f7f\u7528\u8005\u6709\u4ee5\u4e0b5\u7a2e\u5f62\u5f0f
* \u6240\u6709\u4f7f\u7528\u8005
self \u5df1\u9023\u7dda\u7684\u4f7f\u7528\u8005
anonymous \u672a\u7d93\u8a8d\u8b49\u7684\u4f7f\u7528\u8005
users \u7d93\u8a8d\u8b49\u7684\u4f7f\u7528\u8005
RE(regular expression,\u6b63\u898f\u8868\u793a\u6cd5) \u7528RE\u6307\u5b9a\u7684\u4f7f\u7528\u8005<\/p>\n\n\n\n
\u5b58\u53d6\u7b49\u7d1a\u6709\u4ee5\u4e0b\u5f62\u5f0f
write \u53ef\u66f4\u65b0
read \u53ef\u8b80\u53d6
search \u53ef\u4f7f\u7528\u641c\u5c0b\u904e\u6ffe\u5668
compare \u53ef\u6bd4\u5c0d\u5c6c\u6027
auth \u53ef\u9032\u884c\u8a8d\u8b49
none \u7121\u6cd5\u5b58\u53d6
ps:\u9ad8\u5c64\u5b58\u53d6\u7b49\u7d1a\u6703\u64c1\u6709\u4f4e\u5c64\u6b21\u5b58\u53d6\u7b49\u7d1a\u7684\u80fd\u529b<\/p>\n\n\n\n
\u5c0d\u8c61\u6709\u4ee5\u4e0b\u5f62\u5f0f
RE,\u683c\u5f0f\u70badn.targestyle=regex
\u641c\u5c0b\u904e\u6ffe\u5668,\u683c\u5f0f\u70bafilter=ldapfilter
\u5c6c\u6027\u540d\u7a31\u6e05\u55ae,\u683c\u5f0f\u70baattrs=attributelist<\/p>\n","protected":false},"excerpt":{"rendered":"
slapd.conf\u8ca0\u8cacslapd,slurpd,slap\u7cfb …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[21],"tags":[],"class_list":["post-690","post","type-post","status-publish","format-standard","hentry","category-linuxservice"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/690","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/comments?post=690"}],"version-history":[{"count":0,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/690\/revisions"}],"wp:attachment":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/media?parent=690"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/categories?post=690"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/tags?post=690"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}