https://github.com/palw3ey/rfc2307bis
replace the old rfc2307.ldif by the new rfc2307bis.ldif
https://github.com/palw3ey/rfc2307bis
memberof openldap-server overlay rfc2307 rfc2307bis slapd
Last synced: 3 months ago
JSON representation
replace the old rfc2307.ldif by the new rfc2307bis.ldif
- Host: GitHub
- URL: https://github.com/palw3ey/rfc2307bis
- Owner: palw3ey
- License: mit
- Created: 2022-09-26T14:49:43.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2025-01-02T23:03:45.000Z (5 months ago)
- Last Synced: 2025-01-22T05:14:33.202Z (5 months ago)
- Topics: memberof, openldap-server, overlay, rfc2307, rfc2307bis, slapd
- Homepage:
- Size: 11.7 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.txt
Awesome Lists containing this project
README
# rfc2307bis
nis rfc2307 is obsolete, this README will help you replace it with the new rfc2307bis.ldif
# 1 - Install openldap and utils
```bash
sudo apt install slapd ldap-utils
```
# 2 - Download rfc2307bis.ldif
```bash
sudo wget https://github.com/palw3ey/rfc2307bis/releases/download/latest/rfc2307bis.ldif -O /etc/ldap/schema/rfc2307bis.ldif
```
# 3 - Edit slapd.init.ldif to replace rfc2307
```bash
sudo vi /usr/share/slapd/slapd.init.ldif
```
find this line :
```bash
include: file:///etc/ldap/schema/nis.ldif
```
append a # at the beginning of the line, to make it as a comment.
And just below this commented line, add :
```bash
include: file:///etc/ldap/schema/rfc2307bis.ldif
```
# 4 - Start the configuration of OpenLDAP
```bash
sudo dpkg-reconfigure slapd
```
# 5 - Verify that rfc2307bis is enabled
```bash
sudo ldapsearch -LLL -Y external -H ldapi:/// -b cn=schema,cn=config -s one dn
```
If everything is OK, then you should see this line in the output :
```bash
dn: cn={2}rfc2307bis,cn=schema,cn=config
```
# 6 - memberof overlay (optional)
Enable memberof overlay : To automatically add (or remove) a "memberof" attribute to the user entry, when the user is added (or removed) to a groupofnames.
Check if memberof is already enabled :
```bash
sudo slapcat -n 0 | grep "olcModuleLoad.*memberof"
```
Otherwise load memberof module :
```bash
sudo ldapmodify -Y EXTERNAL -H ldapi:/// <