howto for OpenLDAP for FREESCO 0.2.7

What is OpenLDAP?

Lightweight Directory Access Protocol (LDAP) is an open-standard protocol for accessing X.500 directory services. The protocol runs over Internet transport protocols, such as TCP. This howto will describe the most common use of OpenLDAP namely to serve a central e-mail address book.

Requirements

• plenty of RAM, 32Mb or more.
• aprox. 24 Mb free hard disk space (during install), installed aprox. 17Mb.
• recommended for Pentium class FREESCO machines only

Sample Installation

Remember, this package is beta!

[Linux]installpkg http://dingetje.homeip.net/beta/openldap_2.1.8_dingetje Now downloading the install script for openldap_2.1.8_dingetje... Warning: installing software from a 3rd party package could damage your router's configuration or make it insecure. You should only install a package from an author/site you trust. http://dingetje.homeip.net/beta/openldap_2.1.8_dingetje.sh (2K) openldap_2.1.8_dingetje. [########################] 2K | 68.00K/s 2283 bytes transferred in 0.03 sec (64.92k/sec) Do you want to view the install script before executing it [y/n]? n Continue installing [y/n]? y http://dingetje.homeip.net/beta/openldap_2.1.8_dingetje.tgz (6187K) openldap_2.1.8_dingetje. [########################] 6187K | 13.26K/s 6335887 bytes transferred in 466.53 sec (13.26k/sec) Unpacking... Syncing... Restarting firewall... Starting OpenLDAP... Stopping OpenLDAP server... Done Starting OpenLDAP server... Done Installation is complete. Now you can use - OpenLDAP + SASL + OpenSSL OpenLDAP is compiled with support for Cyrus SASL and OpenSSL Use Google for details howto setup OpenLDAP and how to populate the database A sample database called 'stooges' is in place The command: 'ldapsearch -x -b "o=stooges"' should show all records The slapd.conf is using a simple clear text password now for the sample database. This is *NOT* recommended!. Use the SASL tools for an encrypted password. Again: use Google for details! You'll need to create a certificate for secure use of LDAP! I managed to setup a SSL connection using NetScape Composer but failed to do so for OutLook Express A good OpenLDAP tutorial can be found at: http://www.direct-to-linux.com/TUTORIALS/LinuxTutorialLDAP.html Default OpenLDAP is blocked from the internet, you'll need to remove the firewall rules in the /rc/rcuser/rc_openldap script to allow external access Enjoy! webmaster@dingetje.homeip.net [Linux]

Post Install

[Linux] ldapsearch -x -b "o=stooges" # extended LDIF # # LDAPv3 # filter: (objectclass=*) # requesting: ALL # # stooges .... result: 0 Success # numResponses: 8 # numEntries: 7

Server Configuration

Client Configuration

• Outlook Express (without SSL)
• Netscape Address Book (without SSL)
• Netscape Address Book (with SSL)

Check out the links below for some good tutorials on OpenLDAP.

Usefull links

• http://www.openldap.org/
• http://www.direct-to-linux.com/TUTORIALS/LinuxTutorialLDAP.html
• http://www.raphinou.com/ldaps/
• http://www.cerritoslug.org/tutorials/ldap/

Written for FREESCO by dingetje
Last edit: May. 28, 2005