OpenLDAP - Revision history

Michael.mast: /* LDAPS */

2018-03-19T15:56:59Z

LDAPS

Michael.mast: /* CentOS 7 */

2018-03-19T15:55:46Z

CentOS 7

Michael.mast: /* Active Directory LDAP Proxy */

2018-03-02T18:44:36Z

Active Directory LDAP Proxy

Michael.mast: /* CentOS 7 */

2018-03-02T18:39:00Z

CentOS 7

Michael.mast: /* Notes */

2018-03-01T20:16:46Z

Notes

Michael.mast: /* AD Proxy */

2018-03-01T17:59:37Z

AD Proxy

Michael.mast: /* Notes */

2018-03-01T17:41:49Z

Notes

Michael.mast: Created page with "==AD Proxy== ===Purpose=== To proxy secure LDAP requests from the internet to MS AD. ===Notes=== *Interesting YouTube Video that covers everything except enabling TLShttp..."

2018-03-01T17:39:42Z

Created page with "==AD Proxy== ===Purpose=== To proxy secure LDAP requests from the internet to MS AD. ===Notes=== *Interesting YouTube Video that covers everything except enabling TLS<ref>http..."

New page

==AD Proxy==
===Purpose===
To proxy secure LDAP requests from the internet to MS AD.
===Notes===
*Interesting YouTube Video that covers everything except enabling TLS<ref>https://www.youtube.com/watch?v=bp8ffdY7Mu4</ref>
*openLDAP as proxy to Active Directory as stated by SAMBA<ref>https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD</ref>
*A guide by owncloud.org<ref>https://doc.owncloud.org/server/10.0/admin_manual/configuration/ldap/ldap_proxy_cache_server_setup.html</ref>

@@ Line 50: / Line 50: @@
 </pre>
 ====LDAPS====
-Edit /etc/sysconfig/slapd and update to take secure connections<ref>https://www.lisenet.com/2016/openldap-with-ssl-and-nfs-for-user-home-directories-on-centos-7/</ref>
+Edit /etc/sysconfig/slapd and update to take secure connections, install certificates, Restart services<ref>https://www.lisenet.com/2016/openldap-with-ssl-and-nfs-for-user-home-directories-on-centos-7/</ref>
 <pre>
 sed -i 's/SLAPD_URLS=\"ldapi:\/\/\/\ ldap:\/\/\/\"/SLAPD_URLS=\"ldapi:\/\/\/\ ldaps:\/\/\/\"/' /etc/sysconfig/slapd

@@ Line 45: / Line 45: @@
 firewall-cmd --reload
 </pre>
+When finished, you can query the OpenLDAP but must authenticate in the process. In this configuration it does not allow for anonymous binds, which is a good thing.
 ===Notes===
 *Interesting YouTube Video that covers everything except enabling TLS<ref>https://www.youtube.com/watch?v=bp8ffdY7Mu4</ref>

← Older revision		Revision as of 18:39, 2 March 2018
Line 8:		Line 8:

	yum -y install openldap openldap-servers		yum -y install openldap openldap-servers
		+	cat <<EOF >>/etc/openldap/slapd.conf

		+	moduleload back_ldap
		+
		+	include /etc/openldap/schema/core.schema
		+	include /etc/openldap/schema/cosine.schema
		+	include /etc/openldap/schema/nis.schema
		+	include /etc/openldap/schema/inetorgperson.schema
		+
		+
		+	pidfile /var/run/openldap/slapd.pid
		+	argsfile /var/run/openldap/slapd.args
		+
		+	sizelimit unlimited
		+
		+	idletimeout 3600
		+	writetimeout 600
		+
		+	database ldap
		+	suffix "dc=your,dc=tld"
		+	uri "ldap://domaincontroller"
		+	chase-referrals no
		+	idassert-bind bindmethod=simple
		+	mode=self
		+	binddn="cn=binduser,ou=Users,DC=your,DC=tld"
		+	credentials="password"
		+
		+	logfile /var/log/slapd.log
		+	loglevel 1
		+	EOF
		+
		+	slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d/
		+	systemctl enable slapd
		+	systemctl start slapd
		+	firewall-cmd --permanent --add-service=ldap
		+	firewall-cmd --reload
	</pre>		</pre>

← Older revision		Revision as of 20:16, 1 March 2018
Line 16:		Line 16:
	*A guide by owncloud.org<ref>https://doc.owncloud.org/server/10.0/admin_manual/configuration/ldap/ldap_proxy_cache_server_setup.html</ref>		*A guide by owncloud.org<ref>https://doc.owncloud.org/server/10.0/admin_manual/configuration/ldap/ldap_proxy_cache_server_setup.html</ref>
	*Possible howto on enabling TLS<ref>https://www.itzgeek.com/how-tos/linux/centos-how-tos/step-step-openldap-server-configuration-centos-7-rhel-7.html</ref>		*Possible howto on enabling TLS<ref>https://www.itzgeek.com/how-tos/linux/centos-how-tos/step-step-openldap-server-configuration-centos-7-rhel-7.html</ref>
		+	*Here is someone that has already gone through the work for me. Will be working off of this how-to.<ref>https://howdoilinux.com/2015/05/openldap-to-active-directory-proxy-configuration/</ref>

← Older revision		Revision as of 17:41, 1 March 2018
Line 6:		Line 6:
	*openLDAP as proxy to Active Directory as stated by SAMBA<ref>https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD</ref>		*openLDAP as proxy to Active Directory as stated by SAMBA<ref>https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD</ref>
	*A guide by owncloud.org<ref>https://doc.owncloud.org/server/10.0/admin_manual/configuration/ldap/ldap_proxy_cache_server_setup.html</ref>		*A guide by owncloud.org<ref>https://doc.owncloud.org/server/10.0/admin_manual/configuration/ldap/ldap_proxy_cache_server_setup.html</ref>
		+	*Possible howto on enabling TLS<ref>https://www.itzgeek.com/how-tos/linux/centos-how-tos/step-step-openldap-server-configuration-centos-7-rhel-7.html</ref>

@@ Line 1: / Line 1: @@
-==AD Proxy==
+==Active Directory LDAP Proxy==
 ===Purpose===
 To proxy secure LDAP requests from the internet to MS AD.
 ===Notes===
 *Interesting YouTube Video that covers everything except enabling TLS<ref>https://www.youtube.com/watch?v=bp8ffdY7Mu4</ref>