Changes between Version 79 and Version 80 of Old/hNodes/cNodeVer3/dAssembly/e4NodesSetup

Timestamp:

Jul 15, 2013, 6:56:57 PM (11 years ago)

Author:

seskar

Comment:

—

Old/hNodes/cNodeVer3/dAssembly/e4NodesSetup

@@ -563 +563 @@
 }}}
 
-2. Install the server and utilities:
-{{{
-   apt-get install slapd ldap-utils phpldapadmin
-}}}
-
-3. Modify the /etc/default/slapd file and edit the SLAPD_CONF and SLAPD_PIDFILE values to
-{{{
-   SLAPD_CONF="/etc/ldap/slapd.conf"
-   SLAPD_PIDFILE="/var/run/slapd/slapd.pid"
-}}}
-This is our slapd.conf file, please change it according to your organization
-
-{{{
-   allow bind_v2
-   include /etc/ldap/schema/core.schema
-   include /etc/ldap/schema/cosine.schema
-   include /etc/ldap/schema/nis.schema
-   include /etc/ldap/schema/inetorgperson.schema
-   include /etc/ldap/schema/ldapns.schema
-   include /etc/ldap/schema/openssh-lpk_openldap.schema
-
-   oglevel 256
-   modulepath      /usr/lib/ldap
-   moduleload      back_bdb
-
-   backend bdb
-   database bdb
-   index objectclass,entryCSN,entryUUID eq
-   suffix "dc=geni,dc=net"
-   rootdn "dc=geni,dc=net"
-   directory "/var/lib/ldap"
-   access to dn.base="" by * read
-   access to * by dn.regex="cn=admin,dc=geni,dc=net" write by * read
-   access to attrs=userPassword by dn.regex="cn=admin,dc=geni,dc=net" write by anonymous auth by self write by * none
-}}}
-
-4. You can download openssh-lpk_openldap.schema from ​ http://code.google.com/p/openssh-lpk/downloads/detail?name=openssh-lpk_openldap.schema
-
-5. Set sizelimit to 10000 by editing slapd.conf file
-{{{
-   sizelimit 10000
-}}}
-6. Start the service:
-{{{
-   /etc/init.d/slapd start
-}}}
-
-7. Without the pid file, the start/stop script fail to start/stop the daemon. This can be resolved by editing the /etc/init.d/slapd file and search for the function start_slapd(). Add this to the last line of that function before it exits:
-
-pidof /usr/sbin/slapd > "$SLAPD_PIDFILE"
-
-8. Make sure it is running by checking that ldap server is listening on both ports:
-{{{
-   netstat -an | grep 389
-   netstat -an | grep 636
-}}}
-
-9. Stop the service:
-{{{
-   /etc/init.d/slapd stop
-}}}
-
-10. Import initial content (first group and account that will be used as administrators for the login service): This is a brief reasoning behind the entries in the ldif file. Please change the file as per your organizational needs.
-Each organizational unit(ou) has a PI who is the admin for the OU and a group which has all the accounts for the OU. So that is why your first organization and first acount have to conform to such a structure.
-
-OU admin can only manage accounts for that organization.
-Any person that is a member of sysadmin group in LDAP and admin group in login.yaml will be able to use ControlPanel of the ogs_login service to manage ALL accounts.
-
-11. Run the following commands. 
-{{{
-  cp /usr/share/slapd/DB_CONFIG /var/lib/ldap/
-  slapadd -l init.ldif -f /etc/ldap/slapd.conf
-  chown openldap:openldap /var/lib/ldap/*
-}}}
-
-12. Start the service:
-{{{
-   /etc/init.d/slapd start
-}}}
+apt-get install slapd ldap-utils phpldapadmin  (if any error is made during the initial installation, LDAP can be reconfigured with: dpkg-reconfigure slapd)
+
+1.) Omit OpenLDAP server configuration? No
+2.) DNS domain name: geni.net   #The DNS domain name is used to construct the base DN of the LDAP directory.
+3.) Organization name:  GENI
+4.) Password: Sg10l3P
+5.) Database backend to use: HDB
+6.) Do you want the database to be removed when slapd is purged? : Yes
+7.) Move old database? Yes
+8.) Allow LDAPv2 protocol? No
+
+edit /etc/ldap.conf 
+1.) check that you have a proper URI (round line 30):
+uri ldap://console.geni.net/
+2.) uncommend line for host attribute:
+pam_check_host_attr yes
+
+Add these two schemas to your ldap  by copying to schema directory (/etc/ldap/slapd.d/cn=config/cn=schema)
+cd  /etc/ldap/slapd.d/cn\=config/cn\=schema
+wget http://wimax.orbit-lab.org/mmm/cn={4}openssh-lpk-opnldap.ldif
+wget http://www.orbit-lab.org/mmm/cn={5}ldapns.ldif
+
+import initial group and user
+cd /etc/ldap
+wget http://www.orbit-lab.org/mmm/cn={5}ldapns.ldif
+ldapadd -vvv -x -D cn=admin,dc=geni,dc=net -H ldap:/// -W -f init.ldif
+
+Fix the configuration for LDAP for phpldapadmin: 
+edit /etc/phpldapadmin/config.php and change dc=example,dc=com to dc=geni,dc=net
+
+$servers->setValue('server','base',array('dc=geni,dc=net'));
+$servers->setValue('login','bind_id','cn=admin,dc=geni,dc=net');
+
+Set password for group admin user (add attribute -> Password -> set password -> update object)
+
 
 13. Make sure you can access the service with admin credentials: