{"id":1840,"date":"2020-06-03T15:08:07","date_gmt":"2020-06-03T07:08:07","guid":{"rendered":"http:\/\/www.puzi7.com\/?p=1840"},"modified":"2020-06-03T15:08:07","modified_gmt":"2020-06-03T07:08:07","slug":"openldap-%e9%80%9a%e8%bf%87%e5%91%bd%e4%bb%a4-%e6%b7%bb%e5%8a%a0%e4%bf%ae%e6%94%b9%e7%94%a8%e6%88%b7%ef%bc%8c%e7%bb%84%e5%92%8c%e6%9f%a5%e6%89%be","status":"publish","type":"post","link":"https:\/\/www.puzi7.net\/?p=1840","title":{"rendered":"openldap \u901a\u8fc7\u547d\u4ee4 \u6dfb\u52a0\u4fee\u6539\u7528\u6237\uff0c\u7ec4\u548c\u67e5\u627e"},"content":{"rendered":"

\u5982\u679c\u6ca1\u6709openldap\u5b89\u88c5\uff0c\u53ef\u4ee5\u642d\u5efa\u4e2adocker\u73af\u5883\uff0c\u7136\u540e\u62c9\u53d6openldap\u7684\u955c\u50cf\u3002\u6bd4\u5982<\/p>\n

    \n
  1. \u83b7\u53d6\u955c\u50cf\u00a0 \u00b7docker pull osixia\/openldap:latest\u00b7<\/li>\n
  2. \u8fd0\u884c\u5bb9\u5668\n
      \n
    1. docker run -p 389:389 –name openldap –network bridge –hostname host –env LDAP_ORGANISATION=”myorg” –env LDAP_DOMAIN=”myorg.com” –env LDAP_ADMIN_PASSWORD=”111111″ –detach osixia\/openldap<\/li>\n
    2. \u914d\u7f6eLDAP\u7ec4\u7ec7\u8005\uff1a–env LDAP_ORGANISATION=”myorg”<\/li>\n
    3. \u914d\u7f6eLDAP\u57df\uff1a–env LDAP_DOMAIN=”myorg.com”<\/li>\n
    4. \u914d\u7f6eLDAP\u5bc6\u7801\uff1a–env LDAP_ADMIN_PASSWORD=”111111″<\/li>\n<\/ol>\n<\/li>\n
    5. \u8fdb\u5165\u5bb9\u5668\n
        \n
      1. docker exec -it {container name} \/bin\/sh<\/li>\n<\/ol>\n<\/li>\n
      2. \u6d4b\u8bd5ldap\n
          \n
        1. ldapsearch -D “cn=admin,dc=myorg,dc=com” -w 111111<\/strong>\n
            \n
          1. \u5982\u679c\u6709\u8fd4\u56de\u641c\u7d22\u7ed3\u679c\u8868\u793a\u6210\u529f<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<\/li>\n
          2. \u8fd9\u4e2adocker\u73af\u5883\u53ef\u80fd\u6ca1\u6709vi\u5de5\u5177\uff0c\u53ef\u4ee5\u81ea\u5df1\u5b89\u88c5\u4e0b\n
              \n
            1. apt-get update<\/li>\n
            2. apt-get install vi<\/li>\n<\/ol>\n<\/li>\n
            3. \u6dfb\u52a0organizationalUnit\n
                \n
              1. cat add_unit.ldif\n
                  \n
                1. dn: ou=User,dc=myorg,dc=com
                  \nobjectClass: organizationalUnit
                  \nou: User<\/li>\n<\/ol>\n<\/li>\n
                2. ldapadd -D cn=admin,dc=myorg,dc=com -x -W -f add_unit.ldif<\/strong><\/code><\/li>\n<\/ol>\n<\/li>\n
                3. \u6dfb\u52a0posixGroup\n
                    \n
                  1. cat add_group.ldif\n
                      \n
                    1. dn: cn=iocc,ou=User,dc=myorg,dc=com
                      \nobjectClass: top
                      \nobjectClass: posixGroup
                      \ngidNumber: 500<\/li>\n<\/ol>\n<\/li>\n
                    2. ldapadd -D cn=admin,dc=myorg,dc=com -x -W -f add_group.ldif<\/code><\/strong><\/li>\n<\/ol>\n<\/li>\n
                    3. \u6dfb\u52a0User\n
                        \n
                      1. cat add_user.ldif\n
                          \n
                        1. dn: cn=ruby,ou=User,dc=myorg,dc=com
                          \nobjectClass: top
                          \nobjectClass: inetOrgPerson
                          \nobjectClass: posixAccount
                          \nobjectClass: shadowAccount
                          \ncn: ruby
                          \nsn: chyi
                          \nuid: ruby
                          \nuidNumber: 1000
                          \ngidNumber: 500
                          \nhomeDirectory: \/home\/ruby
                          \nloginShell: \/bin\/bash
                          \ngecos: ruby
                          \nuserPassword: 111111
                          \nshadowLastChange: 0
                          \nshadowMax: 0
                          \nshadowWarning: 0<\/li>\n<\/ol>\n<\/li>\n
                        2. ldapadd -D cn=admin,dc=myorg,dc=com -x -W -f add_user.ldif<\/code><\/strong><\/li>\n<\/ol>\n<\/li>\n
                        3. \u6d4b\u8bd5\u6dfb\u52a0\u7684\u7528\u6237\n
                            \n
                          1. ldapsearch -x -W -D “cn=admin,dc=myorg,dc=com” -b “ou=User,dc=myorg,dc=com” “(objectclass=*)”<\/strong><\/li>\n<\/ol>\n<\/li>\n
                          2. \u4fee\u6539\u7528\u6237\u5bc6\u7801ldapmodify\n
                              \n
                            1. ldapmodify -D\u00a0“cn=admin,dc=myorg,dc=com” -w {password} <Enter><\/strong><\/li>\n
                            2. dn: userPath<\/li>\n
                            3. changetype:\u00a0modify<\/li>\n
                            4. replace:\u00a0userPassword<\/li>\n
                            5. userPassword:\u00a011111111<\/span><\/li>\n
                            6. <Enter><\/li>\n
                            7. <Enter><\/li>\n
                            8. \u5fc5\u987b\u6309\u7167\u4e0a\u8fb9\u7684\u8f93\u5165\u56de\u8f66\u952e\u624d\u884c<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

                               <\/p>\n","protected":false},"excerpt":{"rendered":"

                              \u5982\u679c\u6ca1\u6709openldap\u5b89\u88c5\uff0c\u53ef\u4ee5\u642d\u5efa\u4e2adocker\u73af\u5883\uff0c\u7136\u540e\u62c9\u53d6openldap\u7684\u955c\u50cf\u3002…<\/span><\/p>\n

                              Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[60,84],"class_list":["post-1840","post","type-post","status-publish","format-standard","hentry","category-9","tag-docker","tag-ldap","zoom-theme-has-thumb"],"_links":{"self":[{"href":"https:\/\/www.puzi7.net\/index.php?rest_route=\/wp\/v2\/posts\/1840","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.puzi7.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.puzi7.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.puzi7.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.puzi7.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1840"}],"version-history":[{"count":0,"href":"https:\/\/www.puzi7.net\/index.php?rest_route=\/wp\/v2\/posts\/1840\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.puzi7.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1840"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.puzi7.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1840"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.puzi7.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1840"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}