Answer the question
In order to leave comments, you need to log in
Openldap AD Proxy?
Please help me understand how Openldap works.
I want to set up an Openfire server to serve two domains. I read about Openldap, they say this is what you need. But there's no way to set it up.
There is Ubuntu Server 14.04.3 LTS, on it Openfire 3.10.0 and installed slapd, ldap-utils. Two corporate networks are connected via VPN.
I would like users of two domains to be able to log in to this Openfire server. That is, you need to configure Openldap so that it requests information from domain controllers.
While I'm trying to configure Openldap to see at least one domain.
Now the config looks like this:
cat /etc/ldap/ldap.conf
BASE cn=users,cn=office,dc=company,dc=ru
URI ldap://srv1.company.ru
cat /etc/ldap/slapd.conf
include /etc/ldap/schema/core.schema
include /etc/ldap/schema/cosine.schema
include /etc/ldap/schema/inetorgperson.schema
include /etc/ldap/schema/nis.schema
include /etc/ldap/schema/samba.schema
modulepath /var/lib/ldap
moduleload back_ldap
pidfile /var/run/slapd/slapd.pid
argsfile /var/run/slapd/slapd.args
defaultsearchbase "OU=users,OU=office,DC=company,DC=ru"
idletimeout 60
access to * by * read
### Proxy to AD company.ru ####################
database ldap
suffix "OU=users,OU=office,DC=company,DC=ru"
readonly yes
protocol-version 3
uri "ldap://srv1.company.ru"
rebind-as-user
idassert-bind bindmethod=simple
binddn= "CN=openfire,CN=Managed Service Accounts,DC=company,DC=ru"
rootpw {SSHA}ViOcMGF7U8VV+/NV7F4sQwM78
credentials=open
mode=none
idassert-authzFrom “*”
loglevel 0
sudo service slapd restart
* Stopping OpenLDAP slapd [ OK ]
* Starting OpenLDAP slapd [ OK ]
netstat -al
Активные соединения с интернетом (servers and established)
tcp 0 0 *:ldap *:* LISTEN
tcp6 0 0 [::]:ldap [::]:* LISTEN
ldapsearch -h localhost -x
# extended LDIF
#
# LDAPv3
# base <cn=users,cn=office,dc=company,dc=ru> (default) with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#
# search result
search: 2
result: 32 No such object
# numResponses: 1
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question