Install redhat-ds

* Core LDAP server daemon (default port: 389 or 636)
* LDAP v3 compliant
* Inlcudes
– CLI server management
– Admin programs, scripts such as export/backup databases

* Admin GUI

* Default port: 9830
* Acts as a management agent
* Mandatory for each machine
* Communicates with DS console and performs operations on DS instances

* DN defaults to cn=Directory Manager
* Used to administer all user and config tasks
* No directory entry for Directory Manager:
– purely used for authentication
– Cannot create an actual Directory Server entry that uses the same DN as the Directory Manager DN
* No need to conform to
– DS config suffix
– access controls
– password policy
– database limits for size, time and look-through limits

* User name defaults to admin
* Superuser used specifically to manage Directory Server and Admin Server
* Can NOT create top level entries for a new suffix (only Directory Manager can)
* Do apply to administrator (NOT to Directory Manager):
– Password policies
– Size, time and look-through limits

* Recommend: matches organization’s DNS domain name

* Main directory where config information is stored: log files, config files, port numbers
* Stored in o=NetscapeRoot tree
* Need to be backuped

* Allows servers to be grouped together logically when splitting administrative tasks
* Each admin domain must have an admin domain owner
* All servers must share the same config directory hence Configuration Directory Administrator has complete access to all installed DSs, regardless of the domain
* Servers on two different domains can use different user directories for authentication and user management

* Used to create and config instances of
– Directory Server
– Admin Server
* Use setup-ds.pl to create DS ONLY
* Config values can be provided from inf file or command line. Command line overrides inf file values.
* Silent install:

setup-ds-admin.pl -s -f /export/files/install.inf
setup-ds-admin.pl -s -f common.inf General.FullMachineName=ldap01 slapd.ServerIdentifier=ldap01

* Use Control-B and Enter to go back to previous screen
* Log file is located in /tmp directory

# cat /etc/redhat-release
Red Hat Enterprise Linux Server release 6.4 (Santiago)
 
# java -version
java version "1.6.0_24"
OpenJDK Runtime Environment (IcedTea6 1.11.9) (rhel-1.57.1.11.9.el6_4-x86_64)
OpenJDK 64-Bit Server VM (build 20.0-b12, mixed mode)
 
# cat /proc/sys/fs/file-max
188758

yum install java-1.6.0-openjdk
/usr/sbin/alternatives --config java

yum install redhat-ds
 
# /usr/sbin/setup-ds-admin.pl

* Install dependencies

yum install 389-ds-base
yum install mod_nss
yum install perl-CGI
yum install jss
yum install ldapjdk

* Download redhat-ds media from Redhat
* Install RPM packages

cd Pacakges
ls *.rpm | egrep -iv -e devel -e debuginfo | xargs rpm -ivh

* Silent setup for DS and AS

/usr/sbin/setup-ds-admin.pl -s -f /export/ds-inf/setup.inf

* Setup.inf:

[General]
FullMachineName= ldap.example.com
SuiteSpotUserID= nobody
SuiteSpotGroup= nobody
AdminDomain= sec.example.com
ConfigDirectoryAdminID= admin
ConfigDirectoryAdminPwd= secret
ConfigDirectoryLdapURL= ldap://ldap.example.com:389/o=NetscapeRoot
 
[slapd]
SlapdConfigForMC= Yes
UseExistingMC= 0
ServerPort= 389
ServerIdentifier= secldap
Suffix= dc=sec,dc=example,dc=com
RootDN= cn=Directory Manager
RootDNPwd= mypass
AddOrgEntries= No
AddSampleEntries= No
InstallLdifFile= suggest
 
[admin]
SysUser= nobody
Port= 9830
ServerAdminID= admin
ServerAdminPwd= secret

* AS must already be configured and running

/usr/sbin/setup-ds-admin.pl -s -f /export/ds-inf/setup-ds.inf

* setup-ds.inf

[General]
FullMachineName= ldap.example.com
SuiteSpotUserID= nobody
SuiteSpotGroup= nobody
[slapd]
ServerPort= 389
ServerIdentifier= myldap
Suffix= dc=example,dc=com
RootDN= cn=Directory Manager
RootDNPwd= secret
ds_bename= exampleDB
SlapdConfigForMC= Yes
UseExistingMC= 0
AddSampleEntries= No

/etc/init.d/dirsrv start 
/etc/init.d/dirsrv stop
/etc/init.d/dirsrv restart

service dirsrv-admin start
service dirsrv-admin stop
service dirsrv-admin restart

chkconfig dirsrv on

* Add to /etc/sysconfig/iptables

-A INPUT -m state --state NEW -m tcp -p tcp --dport 389 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 636 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 9830 -j ACCEPT

* Restart iptalbes firewall:

service iptables restart

ldapmodify -D "cn=directory manager" -w mypass -h localhost -p 389 -x -f my.ldif

* https://access.redhat.com/site/documentation/Red_Hat_Directory_Server/
* Setting up 389 Directory Server on CentOS 6.2