{"id":7704,"date":"2013-05-21T09:45:01","date_gmt":"2013-05-21T14:45:01","guid":{"rendered":"http:\/\/jianmingli.com\/wp\/?p=7704"},"modified":"2013-07-06T11:08:16","modified_gmt":"2013-07-06T16:08:16","slug":"install-redhat-ds","status":"publish","type":"post","link":"https:\/\/jianmingli.com\/wp\/?p=7704","title":{"rendered":"Install redhat-ds"},"content":{"rendered":"
\n

Contents<\/h2>\n
    \n\t
  1. \n\t\tDS Components<\/a>\n\t\t
      \n\t\t\t
    1. \n\t\t\t\tDS<\/a>\n\t\t\t<\/li>\n\t\t\t
    2. \n\t\t\t\tDS Console<\/a>\n\t\t\t<\/li>\n\t\t\t
    3. \n\t\t\t\tAdmin Server<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
    4. \n\t\tDefault Accounts<\/a>\n\t\t
        \n\t\t\t
      1. \n\t\t\t\tDirectory Manager<\/a>\n\t\t\t<\/li>\n\t\t\t
      2. \n\t\t\t\tDirectory Administrator<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
      3. \n\t\tOther Concepts<\/a>\n\t\t
          \n\t\t\t
        1. \n\t\t\t\tDirectory Suffix<\/a>\n\t\t\t<\/li>\n\t\t\t
        2. \n\t\t\t\tConfig Directory<\/a>\n\t\t\t<\/li>\n\t\t\t
        3. \n\t\t\t\tAdministration Domain<\/a>\n\t\t\t<\/li>\n\t\t\t
        4. \n\t\t\t\tsetup-ds-admin.pl Script<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
        5. \n\t\tInstall Environment<\/a>\n\t<\/li>\n\t
        6. \n\t\tInstalls<\/a>\n\t\t
            \n\t\t\t
          1. \n\t\t\t\tInstall OpenJDK<\/a>\n\t\t\t<\/li>\n\t\t\t
          2. \n\t\t\t\tInstall DS Packages: redhat-ds and redhat-ds-confole<\/a>\n\t\t\t<\/li>\n\t\t\t
          3. \n\t\t\t\tOffline Install<\/a>\n\t\t\t<\/li>\n\t\t\t
          4. \n\t\t\t\tSilent Setup<\/a>\n\t\t\t<\/li>\n\t\t\t
          5. \n\t\t\t\tSilent setup for DS instance only (No AS)<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
          6. \n\t\tOperation<\/a>\n\t\t
              \n\t\t\t
            1. \n\t\t\t\tstart\/stop\/restart Directory Server<\/a>\n\t\t\t<\/li>\n\t\t\t
            2. \n\t\t\t\tstart\/stop\/restart Admin Server<\/a>\n\t\t\t<\/li>\n\t\t\t
            3. \n\t\t\t\tAuto Start dirsrv<\/a>\n\t\t\t<\/li>\n\t\t\t
            4. \n\t\t\t\tConfig iptables<\/a>\n\t\t\t<\/li>\n\t\t\t
            5. \n\t\t\t\tRun ldif File<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
            6. \n\t\tReferences<\/a>\n\t<\/li>\n<\/ol>\n<\/ol>\n<\/div>\n
               <\/div>\n

              DS Components<\/h2><\/span>\n

              DS<\/h3><\/span>\n

              * Core LDAP server daemon (default port: 389 or 636)
              \n* LDAP v3 compliant
              \n* Inlcudes
              \n– CLI server management
              \n– Admin programs, scripts such as export\/backup databases<\/p>\n

              DS Console<\/h3><\/span>\n

              * Admin GUI<\/p>\n

              Admin Server<\/h3><\/span>\n

              * Default port: 9830
              \n* Acts as a management agent
              \n* Mandatory for each machine
              \n* Communicates with DS console and performs operations on DS instances<\/p>\n

              Default Accounts<\/h2><\/span>\n

              Directory Manager<\/h3><\/span>\n

              * DN defaults to cn=Directory Manager<\/em>
              \n* Used to administer all user and config tasks
              \n* No directory entry for Directory Manager:
              \n– purely used for authentication
              \n– Cannot create an actual Directory Server entry that uses the same DN as the Directory Manager DN
              \n* No need to conform to
              \n– DS config suffix
              \n– access controls
              \n– password policy
              \n– database limits for size, time and look-through limits<\/p>\n

              Directory Administrator<\/h3><\/span>\n

              * User name defaults to admin
              \n* Superuser used specifically to manage Directory Server and Admin Server
              \n* Can NOT<\/em> create top level entries for a new suffix (only Directory Manager can)
              \n* Do apply to administrator (NOT to Directory Manager):
              \n– Password policies
              \n– Size, time and look-through limits<\/p>\n

              Other Concepts<\/h2><\/span>\n

              Directory Suffix<\/h3><\/span>\n

              * Recommend: matches organization’s DNS domain name<\/p>\n

              Config Directory<\/h3><\/span>\n

              * Main directory where config information is stored: log files, config files, port numbers
              \n* Stored in o=NetscapeRoot tree
              \n* Need to be backuped<\/p>\n

              Administration Domain<\/h3><\/span>\n

              * Allows servers to be grouped together logically when splitting administrative tasks
              \n* Each admin domain must have an admin domain owner
              \n* All servers must share the same config directory hence Configuration Directory Administrator has complete access to all installed DSs, regardless of the domain
              \n* Servers on two different domains can use different user directories for authentication and user management<\/p>\n

              setup-ds-admin.pl Script<\/h3><\/span>\n

              * Used to create and config instances of
              \n– Directory Server
              \n– Admin Server
              \n* Use setup-ds.pl to create DS ONLY
              \n* Config values can be provided from inf file or command line. Command line overrides inf file values.
              \n* Silent install:<\/p>\n

              \r\nsetup-ds-admin.pl -s -f \/export\/files\/install.inf\r\nsetup-ds-admin.pl -s -f common.inf General.FullMachineName=ldap01 slapd.ServerIdentifier=ldap01\r\n<\/pre>\n
              * Use Control-B<\/em> and Enter to go back to previous screen
              \n* Log file is located in \/tmp<\/em> directory<\/p>\n
              Install Environment<\/h2><\/span>\n
              \r\n# cat \/etc\/redhat-release\r\nRed Hat Enterprise Linux Server release 6.4 (Santiago)\r\n\r\n# java -version\r\njava version \"1.6.0_24\"\r\nOpenJDK Runtime Environment (IcedTea6 1.11.9) (rhel-1.57.1.11.9.el6_4-x86_64)\r\nOpenJDK 64-Bit Server VM (build 20.0-b12, mixed mode)\r\n\r\n# cat \/proc\/sys\/fs\/file-max\r\n188758\r\n<\/pre>\n
              Installs<\/h2><\/span>\n
              Install OpenJDK<\/h3><\/span>\n
              \r\nyum install java-1.6.0-openjdk\r\n\/usr\/sbin\/alternatives --config java\r\n<\/pre>\n
              Install DS Packages: redhat-ds and redhat-ds-confole<\/h3><\/span>\n
              \r\nyum install redhat-ds\r\n\r\n# \/usr\/sbin\/setup-ds-admin.pl\r\n<\/pre>\n
              Offline Install<\/h3><\/span>\n
              * Install dependencies<\/p>\n
              \r\nyum install 389-ds-base\r\nyum install mod_nss\r\nyum install perl-CGI\r\nyum install jss\r\nyum install ldapjdk\r\n<\/pre>\n
              * Download redhat-ds media from Redhat
              \n* Install RPM packages<\/p>\n
              \r\ncd Pacakges\r\nls *.rpm | egrep -iv -e devel -e debuginfo | xargs rpm -ivh\r\n<\/pre>\n
              Silent Setup<\/h3><\/span>\n
              * Silent setup for DS and AS<\/p>\n
              \r\n\/usr\/sbin\/setup-ds-admin.pl -s -f \/export\/ds-inf\/setup.inf\r\n<\/pre>\n
              * Setup.inf:<\/p>\n
              \r\n[General]\r\nFullMachineName= ldap.example.com\r\nSuiteSpotUserID= nobody\r\nSuiteSpotGroup= nobody\r\nAdminDomain= sec.example.com\r\nConfigDirectoryAdminID= admin\r\nConfigDirectoryAdminPwd= secret\r\nConfigDirectoryLdapURL= ldap:\/\/ldap.example.com:389\/o=NetscapeRoot\r\n\r\n[slapd]\r\nSlapdConfigForMC= Yes\r\nUseExistingMC= 0\r\nServerPort= 389\r\nServerIdentifier= secldap\r\nSuffix= dc=sec,dc=example,dc=com\r\nRootDN= cn=Directory Manager\r\nRootDNPwd= mypass\r\nAddOrgEntries= No\r\nAddSampleEntries= No\r\nInstallLdifFile= suggest\r\n\r\n[admin]\r\nSysUser= nobody\r\nPort= 9830\r\nServerAdminID= admin\r\nServerAdminPwd= secret\r\n<\/pre>\n
              Silent setup for DS instance only (No AS)<\/h3><\/span>\n
              * AS must already be configured and running<\/p>\n
              \r\n\/usr\/sbin\/setup-ds-admin.pl -s -f \/export\/ds-inf\/setup-ds.inf\r\n<\/pre>\n
              * setup-ds.inf<\/p>\n
              \r\n[General]\r\nFullMachineName= ldap.example.com\r\nSuiteSpotUserID= nobody\r\nSuiteSpotGroup= nobody\r\n[slapd]\r\nServerPort= 389\r\nServerIdentifier= myldap\r\nSuffix= dc=example,dc=com\r\nRootDN= cn=Directory Manager\r\nRootDNPwd= secret\r\nds_bename= exampleDB\r\nSlapdConfigForMC= Yes\r\nUseExistingMC= 0\r\nAddSampleEntries= No\r\n<\/pre>\n
              Operation<\/h2><\/span>\n
              start\/stop\/restart Directory Server<\/h3><\/span>\n
              \r\n\/etc\/init.d\/dirsrv start \r\n\/etc\/init.d\/dirsrv stop\r\n\/etc\/init.d\/dirsrv restart \r\n<\/pre>\n
              start\/stop\/restart Admin Server<\/h3><\/span>\n
              \r\nservice dirsrv-admin start\r\nservice dirsrv-admin stop\r\nservice dirsrv-admin restart\r\n<\/pre>\n
              Auto Start dirsrv<\/h3><\/span>\n
              \r\nchkconfig dirsrv on\r\n<\/pre>\n
              Config iptables<\/h3><\/span>\n
              * Add to \/etc\/sysconfig\/iptables<\/p>\n
              \r\n-A INPUT -m state --state NEW -m tcp -p tcp --dport 389 -j ACCEPT\r\n-A INPUT -m state --state NEW -m tcp -p tcp --dport 636 -j ACCEPT\r\n-A INPUT -m state --state NEW -m tcp -p tcp --dport 9830 -j ACCEPT\r\n<\/pre>\n
              * Restart iptalbes firewall:<\/p>\n
              \r\nservice iptables restart\r\n<\/pre>\n
              Run ldif File<\/h3><\/span>\n
              \r\nldapmodify -D \"cn=directory manager\" -w mypass -h localhost -p 389 -x -f my.ldif\r\n<\/pre>\n
              References<\/h2><\/span>\n
              * https:\/\/access.redhat.com\/site\/documentation\/Red_Hat_Directory_Server\/<\/a>
              \n*               Setting up 389 Directory Server on CentOS 6.2<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
              DS Components DS * Core LDAP server daemon (default port: 389 or 636) * LDAP v3 compliant * Inlcudes – CLI server management – Admin programs, scripts such as export\/backup databases DS Console * Admin GUI Admin Server * Default … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[301,379],"tags":[141,637,343],"class_list":["post-7704","post","type-post","status-publish","format-standard","hentry","category-redhat","category-redhat-ds","tag-install","tag-redhat-ds","tag-rhel"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p8cRUO-20g","_links":{"self":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/7704","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7704"}],"version-history":[{"count":7,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/7704\/revisions"}],"predecessor-version":[{"id":7756,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/7704\/revisions\/7756"}],"wp:attachment":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7704"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7704"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7704"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}