CentOS 7.x setup 389-DS

From Notes_Wiki
Revision as of 15:08, 14 October 2017 by Saurabh (talk | contribs) (Created page with "<yambe:breadcrumb>CentOS_7.x_389DS|CentOS 7.x 389DS</yambe:breadcrumb> =CentOS 7.x setup 389-DS= To configure 389-DS on CentOS 7.x use following steps: # Make entry in <tt>/e...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

<yambe:breadcrumb>CentOS_7.x_389DS|CentOS 7.x 389DS</yambe:breadcrumb>

CentOS 7.x setup 389-DS

To configure 389-DS on CentOS 7.x use following steps:

  1. Make entry in /etc/hosts
    192.168.123.13 ldap.sbarjatiya.com ldap
  2. create /etc/sysctl.d/10-ldap.conf file and enter below lines
    net.ipv4.tcp_keepalive_time = 300
    net.ipv4.ip_local_port_range = 1024 65000
    fs.file-max = 64000
  3. Add the following lines at the bottom of /etc/security/limits.conf
    * soft nofile 8192
    * hard nofile 8192
  4. Add the line at the end of /etc/profile
    ulimit -n 8192
  5. Add the line at the end of /etc/pam.d/login
    session required /lib/security/pam_limits.so
  6. Restart the server
    shutdown -r now
  7. Install epel & remi repository
    yum install -y epel-release
    wget http://rpms.famillecollet.com/enterprise/remi-release-7.rpm
    rpm -Uvh remi-release-7.rpm
  8. Create a LDAP user account
    useradd ldapadmin
    passwd ldapadmin
  9. Install 389-ds and dependency packages
    yum install -y 389-ds-base openldap-clients idm-console-framework 389-adminutil 389-admin 389-admin-console 389-console 389-ds-console
  10. Configure LDAP server using ' setup-ds-admin.pl' command
    Would you like to continue with set up? [yes]:
    Would you like to continue? [yes]:
    Choose a setup type [2]:
    Computer name [ldap]: ldap.sbarjatiya.com
    System User [dirsrv]: ldapadmin
    System Group [dirsrv]: ldapadmin
    configuration directory server? [no]:
    administrator ID [admin]:
    password:
    Administration Domain [sbarjatiya.com]:
    Directory server network port [389]:
    Directory server identifier [ldap]:
    Suffix [dc=sbarjatiya, dc=com]:
    Directory Manager DN [cn=Directory Manager]:
    password:
    Administration port [9830]:
    Are you ready to set up your servers? [yes]:
  11. Start & enable 389-ds services
    systemctl enable dirsrv.target
    systemctl enable dirsrv-admin
    systemctl start dirsrv.target
    systemctl start dirsrv-admin
  12. Test LDAP server
    ldapsearch -x -b "dc=sbarjatiya,dc=com"
  13. Connect using 389-console at http://ldap.sbarjatiya.com:9830/ with username admin and selected Directory Manager password.


Refer:


Steps contributed by Pavan Ponamala


<yambe:breadcrumb>CentOS_7.x_389DS|CentOS 7.x 389DS</yambe:breadcrumb>