LDAP Linux LDAP TLS

LDAP Шифрование

• http://pro-ldap.ru/books/openldap-ubuntu-in-practice/tls.html

 \ldapmodify  -Y EXTERNAL  -H ldapi:/// < 01_certs.ldif

SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
modifying entry "cn=config"

\ldapsearch -Y EXTERNAL -H ldapi:/// -b cn=config -s base

Вывод:

# config
dn: cn=config
objectClass: olcGlobal
cn: config
olcArgsFile: /var/run/slapd/slapd.args
olcLogLevel: none
olcPidFile: /var/run/slapd/slapd.pid
olcToolThreads: 1
olcTLSVerifyClient: never
olcTLSCertificateFile: /etc/ldap/ssl/ldap-srv.example.com.crt
olcTLSCertificateKeyFile: /etc/ldap/ssl/ldap-srv.example.com.key
olcTLSCACertificateFile: /etc/ssl/certs/rootca.crt