LDAP Linux LDAP TLS: различия между версиями
Материал из noname.com.ua
Перейти к навигацииПерейти к поискуSirmax (обсуждение | вклад) |
Sirmax (обсуждение | вклад) |
||
| Строка 29: | Строка 29: | ||
olcTLSCertificateKeyFile: /etc/ldap/ssl/ldap-srv.example.com.key |
olcTLSCertificateKeyFile: /etc/ldap/ssl/ldap-srv.example.com.key |
||
olcTLSCACertificateFile: /etc/ssl/certs/rootca.crt |
olcTLSCACertificateFile: /etc/ssl/certs/rootca.crt |
||
| + | </PRE> |
||
| + | |||
| + | |||
| + | |||
| + | |||
| + | |||
| + | <PRE> |
||
| + | root@node-3:/etc/ldap# netstat -ntpl | grep slap |
||
| + | tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 2875/slapd |
||
| + | tcp6 0 0 :::389 :::* LISTEN 2875/slapd |
||
| + | </PRE> |
||
| + | <PRE> |
||
| + | # /etc/init.d/slapd restart |
||
| + | * Stopping OpenLDAP slapd [ OK ] |
||
| + | * Starting OpenLDAP slapd [ OK ] |
||
| + | </PRE> |
||
| + | <PRE> |
||
| + | # netstat -ntpl | grep slap |
||
| + | tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 6294/slapd |
||
| + | tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 6294/slapd |
||
| + | tcp6 0 0 :::636 :::* LISTEN 6294/slapd |
||
| + | tcp6 0 0 :::389 :::* LISTEN 6294/slapd |
||
</PRE> |
</PRE> |
||
Версия 15:41, 19 мая 2016
LDAP Шифрование
\ldapmodify -Y EXTERNAL -H ldapi:/// < 01_certs.ldif
SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "cn=config"
\ldapsearch -Y EXTERNAL -H ldapi:/// -b cn=config -s base
Вывод:
# config dn: cn=config objectClass: olcGlobal cn: config olcArgsFile: /var/run/slapd/slapd.args olcLogLevel: none olcPidFile: /var/run/slapd/slapd.pid olcToolThreads: 1 olcTLSVerifyClient: never olcTLSCertificateFile: /etc/ldap/ssl/ldap-srv.example.com.crt olcTLSCertificateKeyFile: /etc/ldap/ssl/ldap-srv.example.com.key olcTLSCACertificateFile: /etc/ssl/certs/rootca.crt
root@node-3:/etc/ldap# netstat -ntpl | grep slap tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 2875/slapd tcp6 0 0 :::389 :::* LISTEN 2875/slapd
# /etc/init.d/slapd restart * Stopping OpenLDAP slapd [ OK ] * Starting OpenLDAP slapd [ OK ]
# netstat -ntpl | grep slap tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 6294/slapd tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 6294/slapd tcp6 0 0 :::636 :::* LISTEN 6294/slapd tcp6 0 0 :::389 :::* LISTEN 6294/slapd
