{"id":1165,"date":"2013-10-17T14:00:00","date_gmt":"2013-10-17T05:00:00","guid":{"rendered":"https:\/\/www.jaswill.co.jp\/blog\/2013\/10\/17\/ldap\/"},"modified":"2013-10-17T14:00:00","modified_gmt":"2013-10-17T05:00:00","slug":"ldap","status":"publish","type":"post","link":"https:\/\/www.jaswill.co.jp\/blog\/2013\/10\/17\/ldap\/","title":{"rendered":"LDAP\u306b\u6311\u6226"},"content":{"rendered":"<p>\u3053\u3093\u306b\u3061\u306f\u300c\u30e4\u30de\u300d\u3067\u3059\u3002<br \/>\n\u793e\u5185\u306e\u3068\u3042\u308b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3067\u300cShibboleth\uff08\u30b7\u30dc\u30ec\u30b9\uff09\u300d\u3068\u3044\u3046\u74b0\u5883\u3092\u69cb\u7bc9\u3057\u307e\u3057\u305f\u3002<br \/>\n\u30b7\u30dc\u30ec\u30b9\u3068\u306f\u3001\u7c21\u5358\u306b\u8a00\u3048\u3070\u7570\u306a\u308b\u30b5\u30fc\u30d0\u9593\uff08\u30b5\u30fc\u30d3\u30b9\u9593\uff09\u3067\u3001\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\u3092\u5b9f\u73fe\u3059\u308b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u306e\u7dcf\u79f0\u3067\u3059\u3002<br \/>\n\u305d\u306e\u4e2d\u3067\u3001\u521d\u3081\u3066\u300cLDAP\u300d\u3068\u3044\u3046\u74b0\u5883\u69cb\u7bc9\u3092\u4f53\u9a13\u3057\u307e\u3057\u305f\u3002<br \/>\n\u3057\u304b\u3057\u30a4\u30de\u30a4\u30c1\u7406\u89e3\u3057\u305a\u3089\u3044\u4e0a\u306b\u3001\u30b3\u30de\u30f3\u30c9\u3067\u306e\u64cd\u4f5c\u3068\u3044\u3046\u3053\u3068\u3082\u3042\u308a\u3001<br \/>\nLDAP\u306e\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3092\u6570\u56de\u58ca\u3057\u307e\u3057\u305f\u3002\u3002\u3002\u3002<br \/>\n\u305d\u3093\u306a\u82e6\u52b4\u306e\u672b\u306b\u5f97\u3089\u308c\u305f\u3001\u300cLDAP\u521d\u671f\u5316\u300d\u306e\u65b9\u6cd5\u3092\u5099\u5fd8\u9332\u3068\u3057\u3066\u66f8\u3044\u3066\u307f\u307e\u3059\u3002<br \/>\n\u25a0STEP1<br \/>\n\u3000\u307e\u305a\u306fLDAP\u30b5\u30fc\u30d3\u30b9\u3092\u505c\u6b62\u3057\u307e\u3059<br \/>\n\u3000service slapd stop<br \/>\n\u25a0STEP2<br \/>\n\u3000\u58ca\u308c\u305fDB\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\u3057\u307e\u3059<br \/>\n\u3000rm -rf \/var\/lib\/ldap\/*<br \/>\n\u25a0STEP3<br \/>\n\u3000DB\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u30aa\u30ea\u30b8\u30ca\u30eb\u3092\u30b3\u30d4\u30fc\u3057\u3066\u304d\u307e\u3059<br \/>\n\u3000cp \/usr\/share\/openldap-servers\/DB_CONFIG.example \/var\/lib\/ldap\/DB_CONFIG<br \/>\n\u25a0STEP4<br \/>\n\u3000slapd\u30b5\u30fc\u30d3\u30b9\u306e\u521d\u671f\u5316\u3057\u307e\u3059<br \/>\n\u3000cd \/etc\/openldap<br \/>\n\u3000cp -pR slapd.d slapd.d.org<br \/>\n\u3000rm -fr slapd.d\/*<br \/>\n\u25a0STEP5<br \/>\n\u3000SLAPD\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u30aa\u30ea\u30b8\u30ca\u30eb\u3092\u30b3\u30d4\u30fc<br \/>\n\u3000cp -p \/usr\/share\/openldap-servers\/slapd.conf.obsolete \/etc\/openldap\/slapd.conf<br \/>\n\u25a0STEP6<br \/>\n\u3000LDAP\u7ba1\u7406\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u6697\u53f7\u5316<br \/>\n\u3000slappasswd -h {CRYPT} -c &#8216;$6$%s$&#8217; -s \u6697\u53f7\u5316\u3057\u305f\u3044\u30d1\u30b9\u30ef\u30fc\u30c9<br \/>\n\u3000\u6697\u53f7\u5316\u3055\u308c\u305f\u7d50\u679c\u3092\u30b3\u30d4\u30fc\u3057\u307e\u3059<br \/>\n\u25a0STEP7<br \/>\n\u3000SLAPD\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u7de8\u96c6\u3057\u307e\u3059<br \/>\n\u3000vi \/etc\/openldap\/slapd.conf<br \/>\n\u3000suffix \u306e\u5909\u66f4 (&#8220;dc=sample,dc=com&#8221;)<br \/>\n\u3000rootdn \u306e\u5909\u66f4 (&#8220;cn=Manager,dc=exmaple,dc=com&#8221;)<br \/>\n\u3000rootpw \u306e\u8a2d\u5b9a (\u4e0a\u8a18\u3067\u4f5c\u6210\u3057\u305f LDAP \u7ba1\u7406\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u8a2d\u5b9a)<br \/>\n\u25a0STEP8<br \/>\n\u3000SLAPD\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u30c1\u30a7\u30c3\u30af\u3092\u3057\u307e\u3059<br \/>\n\u3000slaptest -u -f \/etc\/openldap\/slapd.conf -v<br \/>\n\u3000slaptest -f \/etc\/openldap\/slapd.conf -F \/etc\/openldap\/slapd.d<br \/>\n\u25a0STEP9<br \/>\n\u3000\u95a2\u9023\u30d5\u30a1\u30a4\u30eb\u306e\u6240\u6709\u8005\u3092\u5909\u66f4\u3057\u307e\u3059<br \/>\n\u3000chown -R ldap:ldap \/var\/lib\/ldap<br \/>\n\u3000chown -R ldap:ldap \/etc\/openldap\/slapd.d<br \/>\n\u25a0STEP10<br \/>\n\u3000SLAPD\u30b5\u30fc\u30d3\u30b9\u958b\u59cb<br \/>\n\u3000service slapd start<br \/>\n\u25a0STEP11<br \/>\n\u3000LDAP\u691c\u7d22\u5148\u306e\u78ba\u8a8d<br \/>\n\u3000vi \/etc\/openldap\/ldap.conf<br \/>\n\u3000URI ldap:\/\/localhost\/<br \/>\n\u3000BASE dc=example,dc=com<br \/>\n\u25a0STEP12<br \/>\n\u3000\u30c7\u30fc\u30bf\u306e\u6295\u5165<br \/>\n\u3000ldapadd -x -D &#8220;cn=Manager,dc=example,dc=com&#8221; -w \u8a2d\u5b9a\u3057\u305f\u30d1\u30b9\u30ef\u30fc\u30c9 -f ldif\u30d5\u30a1\u30a4\u30eb<br \/>\n\u25a0STEP13<br \/>\n\u3000\u6295\u5165\u3057\u305f\u30c7\u30fc\u30bf\u3092\u78ba\u8a8d\u3059\u308b<br \/>\n\u3000LDAP\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u691c\u7d22\u3057\u3066\u307f\u308b<br \/>\n\u3000ldapsearch -x -D &#8220;cn=Manager,dc=example,dc=com&#8221; -w \u8a2d\u5b9a\u3057\u305f\u30d1\u30b9\u30ef\u30fc\u30c9<br \/>\n\u30b3\u30de\u30f3\u30c9\u306e\u30d1\u30b9\u3084LDAP\u306e\u8a2d\u5b9a\u5024\u306a\u3069\u306f\u5404\u81ea\u306e\u74b0\u5883\u306b\u6cbf\u3063\u3066\u8aad\u307f\u66ff\u3048\u3066\u304f\u3060\u3055\u3044\uff5e<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u3053\u3093\u306b\u3061\u306f\u300c\u30e4\u30de\u300d\u3067\u3059\u3002 \u793e\u5185\u306e\u3068\u3042\u308b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3067\u300cShibboleth\uff08\u30b7\u30dc\u30ec\u30b9\uff09\u300d\u3068\u3044\u3046\u74b0\u5883\u3092\u69cb\u7bc9\u3057\u307e\u3057\u305f\u3002 \u30b7\u30dc\u30ec\u30b9\u3068\u306f\u3001\u7c21\u5358\u306b\u8a00\u3048\u3070\u7570\u306a\u308b\u30b5\u30fc\u30d0\u9593\uff08\u30b5\u30fc\u30d3\u30b9\u9593\uff09\u3067\u3001\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\u3092\u5b9f\u73fe\u3059\u308b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u306e\u7dcf\u79f0\u3067\u3059\u3002 \u305d\u306e\u4e2d\u3067\u3001\u521d\u3081\u3066\u300cLDAP\u300d\u3068\u3044\u3046\u74b0\u5883\u69cb\u7bc9\u3092\u4f53\u9a13\u3057\u307e\u3057\u305f\u3002 \u3057\u304b\u3057\u30a4\u30de\u30a4 [&hellip;]<\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[214,349,350,351],"class_list":["post-1165","post","type-post","status-publish","format-standard","hentry","category-web","tag-centos","tag-shibboleth","tag-ldap","tag-slapd"],"views":21,"_links":{"self":[{"href":"https:\/\/www.jaswill.co.jp\/blog\/wp-json\/wp\/v2\/posts\/1165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jaswill.co.jp\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jaswill.co.jp\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jaswill.co.jp\/blog\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jaswill.co.jp\/blog\/wp-json\/wp\/v2\/comments?post=1165"}],"version-history":[{"count":0,"href":"https:\/\/www.jaswill.co.jp\/blog\/wp-json\/wp\/v2\/posts\/1165\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.jaswill.co.jp\/blog\/wp-json\/wp\/v2\/media?parent=1165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jaswill.co.jp\/blog\/wp-json\/wp\/v2\/categories?post=1165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jaswill.co.jp\/blog\/wp-json\/wp\/v2\/tags?post=1165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}