Ambos lados, revisión anteriorRevisión previaPróxima revisión | Revisión previa |
proyectos:linuxservidor-db-ldap [2022/05/01 19:13] – manuel.floresv | proyectos:linuxservidor-db-ldap [2022/05/02 00:23] (actual) – [Referencias] manuel.floresv |
---|
| |
| |
===== Referencias ===== | |
| |
* https://computingforgeeks.com/how-to-install-and-configure-openldap-ubuntu-18-04/ | |
| |
====== LDAP Cliente Auth pam ====== | ====== LDAP Cliente Auth pam ====== |
skel=/etc/skel umask=077 | skel=/etc/skel umask=077 |
</code> | </code> |
===== Referencias ===== | |
| |
* https://www.tecmint.com/configure-ldap-client-to-connect-external-authentication/ | |
* https://computingforgeeks.com/how-to-configure-ubuntu-18-04-ubuntu-16-04-lts-as-ldap-client/ | |
* https://www.digitalocean.com/community/tutorials/how-to-manage-and-use-ldap-servers-with-openldap-utilities | |
* http://tutoriels.meddeb.net/openldap-tutorial-log/ | |
* https://www.zytrax.com/books/ldap/ch6/#loglevel | |
* https://linoxide.com/linux-how-to/setup-openldap-server-authenticate-client-workstation/ * | |
| |
====== Accesos LDAP ====== | ====== Accesos LDAP ====== |
===== Archivos ===== | ===== Archivos ===== |
===== Opciones ===== | ===== Opciones ===== |
===== Interfaces ===== | ====== Interfaces ====== |
| * [[https://www.fusiondirectory.org/en/|FusionDirectory]] web |
* [[http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page|phpldapadmin]] web | * [[http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page|phpldapadmin]] web |
* [[http://directory.apache.org/studio/|Apache Studio]] escritorio | * [[http://directory.apache.org/studio/|Apache Studio]] de escritorio |
* [[https://www.ldap-account-manager.org/lamcms/|LDAP Account Manager]] | * [[https://www.ldap-account-manager.org/lamcms/|LDAP Account Manager]] web |
* [[https://github.com/kakwa/ldapcherry|LDAPcherry]] | * [[https://github.com/kakwa/ldapcherry|LDAPcherry]] web |
* [[https://www.fusiondirectory.org/en/|FusionDirectory]] | |
| |
| |
| FusionDirectory tiene una version libre y una verdida. La última version liberada es la version 1.3 en abril del 2019 con version de desarrollo 1.4 y último commit en https://github.com/fusiondirectory/fusiondirectory/commits/1.4-dev con fecha 18 marzo del 2022. Este programa viene debian bullseye. |
| |
| LDAP Account Manager tiene la version 7.9.1 https://github.com/LDAPAccountManager lanzada el 15 de abril del 2022 con último commit el día 28 de abril del 2022. Este programa viene debian bullseye. |
| |
| Por defecto se utilizaba Phpldapadmin para administración, pero debido a que no tuvo actualizaciones durante varios años, se creo un fork https://github.com/leenooks/phpLDAPadmin pero la ultima version y commit es la 1.2.6.3 en diciembre del 2021. Este programa viene debian bookworm (testing). |
| |
| |
| Ldapcherry la última version liberada es la 1.1.1 en febrero del 2019 con último commit en mayo 20 del 2020. |
| |
| Por eso se sugiere usar fusiondirectory o LDAP Account Manager por que es la que esta en constante desarrollo. |
| |
| ===== LDAPcherry ===== |
**Instalar ldapcherryd** | **Instalar ldapcherryd** |
| |
* https://gitlab.com/smacz/docker-ldapcherry-fork/-/blob/andrewcz-homelab-179/Dockerfile | * https://gitlab.com/smacz/docker-ldapcherry-fork/-/blob/andrewcz-homelab-179/Dockerfile |
* https://ldapcherry.readthedocs.io/en/latest/ | * https://ldapcherry.readthedocs.io/en/latest/ |
| ===== FusionDirectory ===== |
| Requisitos: |
| - apache2 y |
| - php |
| |
| |
| Instalando paquetes |
| <code bash> |
| |
| apt install fusiondirectory fusiondirectory-plugin-audit fusiondirectory-plugin-audit-schema fusiondirectory-plugin-freeradius-schema fusiondirectory-plugin-freeradius fusiondirectory-plugin-posix fusiondirectory-schema fusiondirectory-plugin-alias fusiondirectory-plugin-alias-schema fusiondirectory-plugin-ldapdump fusiondirectory-plugin-ldapmanager fusiondirectory-plugin-mail fusiondirectory-plugin-mail-schema fusiondirectory-plugin-postfix fusiondirectory-plugin-postfix-schema fusiondirectory-plugin-quota fusiondirectory-plugin-quota-schema fusiondirectory-schema |
| </code> |
| Agregando esquemas LDAP necesarios |
| <code bash> |
| |
| fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/mail-fd.schema |
| fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/mail-fd-conf.schema |
| fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/dns-fd.schema |
| fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/dns-fd-conf.schema |
| fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/ldapns.schema |
| fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/template-fd.schema |
| fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/core-fd.schema |
| fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/core-fd-conf.schema |
| |
| </code> |
| Creando la configuración de acceso LDAP |
| <code bash> |
| |
| nano /etc/fusiondirectory/fusiondirectory.conf |
| fusiondirectory-setup --check-config |
| </code> |
| Luego ir al http://localhost/fusiondirectory/ para configurarlo |
| |
====== Multiple Bases de Datos ====== | ====== Multiple Bases de Datos ====== |
<code bash> | <code bash> |
| |
===== Instalación no Interactiva ===== | ===== Instalación no Interactiva ===== |
====== Administracion Web ====== | |
Requisitos: | |
- apache2 y | |
- php | |
| |
| |
Instalando paquetes | |
<code bash> | |
| |
apt install fusiondirectory fusiondirectory-plugin-audit fusiondirectory-plugin-audit-schema fusiondirectory-plugin-freeradius-schema fusiondirectory-plugin-freeradius fusiondirectory-plugin-posix fusiondirectory-schema fusiondirectory-plugin-alias fusiondirectory-plugin-alias-schema fusiondirectory-plugin-ldapdump fusiondirectory-plugin-ldapmanager fusiondirectory-plugin-mail fusiondirectory-plugin-mail-schema fusiondirectory-plugin-postfix fusiondirectory-plugin-postfix-schema fusiondirectory-plugin-quota fusiondirectory-plugin-quota-schema fusiondirectory-schema | |
</code> | |
Agregando esquemas LDAP necesarios | |
<code bash> | |
| |
fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/mail-fd.schema | |
fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/mail-fd-conf.schema | |
fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/dns-fd.schema | |
fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/dns-fd-conf.schema | |
fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/ldapns.schema | |
fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/template-fd.schema | |
fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/core-fd.schema | |
fusiondirectory-insert-schema -i /etc/ldap/schema/fusiondirectory/core-fd-conf.schema | |
| |
</code> | |
Creando la configuración de acceso LDAP | |
<code bash> | |
| |
nano /etc/fusiondirectory/fusiondirectory.conf | |
fusiondirectory-setup --check-config | |
</code> | |
Luego ir al http://localhost/fusiondirectory/ para configurarlo | |
| |
===== Referencias ===== | ===== Referencias ===== |
Generales | Generales |
* https://computingforgeeks.com/how-to-install-and-configure-openldap-ubuntu-18-04/ | * https://computingforgeeks.com/how-to-install-and-configure-openldap-ubuntu-18-04/ |
* https://www.tecmint.com/configure-ldap-client-to-connect-external-authentication/ | |
* https://www.digitalocean.com/community/tutorials/how-to-manage-and-use-ldap-servers-with-openldap-utilities | * https://www.digitalocean.com/community/tutorials/how-to-manage-and-use-ldap-servers-with-openldap-utilities |
* https://www.digitalocean.com/community/tutorials/how-to-use-ldif-files-to-make-changes-to-an-openldap-system | * https://www.digitalocean.com/community/tutorials/how-to-use-ldif-files-to-make-changes-to-an-openldap-system |
* https://unix.stackexchange.com/questions/362547/automating-slapd-install | * https://unix.stackexchange.com/questions/362547/automating-slapd-install |
* https://apassionatechie.wordpress.com/2017/12/12/automating-slapd-install/ | * https://apassionatechie.wordpress.com/2017/12/12/automating-slapd-install/ |
Autenticacion PC | Autenticacion PC PAM |
* https://linoxide.com/linux-how-to/setup-openldap-server-authenticate-client-workstation/ | * https://linoxide.com/linux-how-to/setup-openldap-server-authenticate-client-workstation/ |
* https://wiki.debian.org/LDAP/NSS | * https://wiki.debian.org/LDAP/NSS |
| * https://www.tecmint.com/configure-ldap-client-to-connect-external-authentication/ |
| * https://computingforgeeks.com/how-to-configure-ubuntu-18-04-ubuntu-16-04-lts-as-ldap-client/ |
Logs | Logs |
* http://tutoriels.meddeb.net/openldap-tutorial-log/ | * http://tutoriels.meddeb.net/openldap-tutorial-log/ |
* https://openldap.org/doc/admin24/access-control.html | * https://openldap.org/doc/admin24/access-control.html |
* https://devopsideas.com/planning-of-ldap-dit-structure-and-config-of-overlays-access-ppolicy/ | * https://devopsideas.com/planning-of-ldap-dit-structure-and-config-of-overlays-access-ppolicy/ |
| Estructura |
| * https://serverfault.com/questions/828490/setting-up-multiple-domain-in-ldap-server |
| * https://serverfault.com/questions/546131/in-ldap-is-it-best-to-nest-groups-under-organizational-units-or-create-an-organi |
| * https://docs.informatica.com/content/dam/source/GUID-A/GUID-ACA85C10-6FE8-4E4A-8258-FDE38165C3BC/8/en/GUID-A197F875-87DE-4FDD-A54B-EE6E131B61B7-low.png |
| * https://stackoverflow.com/questions/18756688/what-are-cn-ou-dc-in-an-ldap-search#18756876 |
| |
| |
| |