1. 安装ldap

# yum -y install openldap compat-openldap openldap-clients openldap-servers openldap-servers-sql openldap-devel

2.配置管理员密码

[root@cdp3 openldap]# slappasswd
New password:
Re-enter new password:
{SSHA}NhczEf9RiZXIaYG33pjOx4aMmKWgG3EW

3. 复制一份slapd.ldif配置文件

[root@cdp3 ~]# cd /etc/openldap/

[root@cdp3 openldap]# cp /usr/share/openldap-servers/slapd.ldif ./

4.修改slapd.ldif文件（修改olcRootPW和DN）

5. 复制DB_CONFIG配置文件

[root@cdp3 openldap]# cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG

6. 备份openldap自带的配置文件，新建自己的配置文件。

[root@cdp3 openldap]# mv slapd.d slapd.d.bak
[root@cdp3 openldap]# mkdir slapd.d
[root@cdp3 openldap]# slapadd -n 0 -F slapd.d -l slapd.ldif
_#################### 100.00% eta none elapsed none fast!
Closing DB...

7.设置权限
[root@cdp3 openldap]# chown -R ldap:ldap slapd.d
[root@cdp3 openldap]# chown -R ldap:ldap /var/lib/ldap/

8. 重启openldap 并设置开机自动启动

[root@cdp3 openldap]# systemctl start slapd
[root@cdp3 openldap]# systemctl status slapd

9. 添加条目

[root@cdp3 openldap]# mkdir /root/ldif
[root@cdp3 openldap]# cd /root/ldif
[root@cdp3 ldif]# vim config_init.ldif
[root@cdp3 ldif]# ldapadd -x -D "cn=admin,dc=haha,dc=com" -W -f config_init.ldif
Enter LDAP Password:
adding new entry "dc=haha,dc=com"

[root@cdp3 ldif]# ldapsearch -x -b 'dc=haha,dc=com' "objectclass=*"
# extended LDIF
#
# LDAPv3
# base <dc=haha,dc=com> with scope subtree
# filter: objectclass=*
# requesting: ALL
#

# haha.com
dn: dc=haha,dc=com
objectClass: dcObject
objectClass: organization
o: admin
dc: haha

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

10.查询条目

[root@cdp3 ldif]# ldapsearch -x -b 'dc=haha,dc=com' "objectClass=*"
# extended LDIF
#
# LDAPv3
# base <dc=haha,dc=com> with scope subtree
# filter: objectClass=*
# requesting: ALL
#

# haha.com
dn: dc=haha,dc=com
objectClass: dcObject
objectClass: organization
o: admin
dc: haha

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

11：查询配置文件

[root@cdp3 ldif]# ldapsearch -H ldapi:/// -Y EXTERNAL -b "cn=config" -LLL -Q

LDAP schema导入

include: file:///etc/openldap/schema/collective.ldif
include: file:///etc/openldap/schema/corba.ldif
include: file:///etc/openldap/schema/cosine.ldif
include: file:///etc/openldap/schema/duaconf.ldif
include: file:///etc/openldap/schema/dyngroup.ldif
include: file:///etc/openldap/schema/inetorgperson.ldif
include: file:///etc/openldap/schema/java.ldif
include: file:///etc/openldap/schema/misc.ldif
include: file:///etc/openldap/schema/nis.ldif
include: file:///etc/openldap/schema/openldap.ldif
include: file:///etc/openldap/schema/pmi.ldif
include: file:///etc/openldap/schema/ppolicy.ldif

LDAP admin 登录