Ubuntu – Setting up OpenLDAP + slapo-translucent on Ubuntu 11.04

ldapopenldapUbuntu

I'm trying to set up a local LDAP server with local entry customizations that lays on top of an existing LDAP directory that we provide (which is read-only). From what I'm seeing, it looks like slapo-translucent is exactly what I need. However, I'm seeing a ton of conflicting information on the web on how to configure OpenLDAP for overlays, since there's some new LDIF configuration format, and the old slapd.conf configuration is deprecated/gone.

I already have slapd installed and running on my Ubuntu instance. Does anyone have any good pointers on where to go to set up overlays?

Thanks!
Cody

Best Answer

If it helps you to get started, it's still possible to configure slapd in the old-fashioned way with slapd.conf and then convert that to new format.

slaptest -f /etc/ldap/slapd.conf -F /etc/ldap/slapd.d

Above would convert /etc/ldap/slapd.conf to the new format, putting the needed data files in /etc/ldap/slapd.d. Just remember to create the destination directory before running the command.

Related Solutions

Mysql – How Do I Configure OpenLDAP to use MySQL (Ubuntu 9.04)

The OpenLDAP Admin Guide seems to walk through the setup in a pretty clear fashion. And man 5 slapd-sql appears to be thorough and complete.

OpenLDAP – Configure Reverse Group Membership Maintenance (memberOf)

I've been struggling with the same thing, the openldap documentation is minimalist and hardly helpful at all. When they went over to a config database (not a bad idea in principle) all the options changed so when people are giving example from /etc/ldap/slapd.conf it is useless with a modern slapd config (such as Ubuntu).

I finally got this working. Here's the summary... first LDIF file:

dn: cn=module,cn=config
objectClass: olcModuleList
cn: module
olcModulePath: /usr/lib/ldap
olcModuleLoad: memberof

Second LDIF file:

dn: olcOverlay=memberof,olcDatabase={1}hdb,cn=config
objectClass: olcMemberOf
objectClass: olcOverlayConfig
objectClass: olcConfig
objectClass: top
olcOverlay: memberof
olcMemberOfDangling: ignore
olcMemberOfRefInt: TRUE
olcMemberOfGroupOC: groupOfNames
olcMemberOfMemberAD: member
olcMemberOfMemberOfAD: memberOf

Add them into the config database using ldapadd (same as normal config stuff).

It does not automatically update the existing data in the database, so I needed to use slapcat to copy everything out into a temporary file, and visit each group, delete the group and add the same group back in again (forces the memberOf attributes to update correctly). If you are starting with an empty database, then it will correctly update the attributes as objects are added.

Also, note that "olcDatabase={1}hdb" is very typical, but not guaranteed to match your setup. Be sure to check that one.

Best Answer

Related Solutions

Mysql – How Do I Configure OpenLDAP to use MySQL (Ubuntu 9.04)

OpenLDAP – Configure Reverse Group Membership Maintenance (memberOf)

Related Topic