LDAP authentication for lighttpd

Like a lot of web server, lighttpd can directly protect the access at certain pages or full folders by a password. This password protection is independent of web application that is protected like this. It's append before any access to the web pages and therefore of the application. The ...

more ...

Offline and caching of LDAP authentication

Centralised authentication through LDAP is very useful. No matter the number of machine that used it, the user have the same login and groups. When the user change his password on one of the machine, the password is updated everywhere. However in case of lack of connection with the LDAP ...

more ...

LDAP authentication

How to add ldap authentication to Debian server. It suppose that a running ldap server is running and that the ldap tree is filled correctly with account informations.

libnss-ldapd installation

The client need the libnss-ldapd package that is a fork of the historical libnss-ldap for better efficiency

# apt-get install libnss-ldapd ...
more ...

bdb_equality_candidates: (uid) not indexed

Il arrive que dans les fichier journaux (syslog) des messages comme suivant apparaissent:

Mar  9 14:56:13 kimsufi slapd[2187]: <= bdb_equality_candidates: (uid) not indexed
Mar  9 14:59:20 kimsufi slapd[23640]: <= bdb_equality_candidates: (gidNumber) not indexed

Comme le dit le message il s'agit d'erreur parce que certains ...

more ...

Installation d'un serveur LDAP pour authentification

Installation du serveur LDAP

# aptitude install slapd ldap-utils
# dpkg-reconfigure slapd

Suivre les recommandations

On crée ensuite la structure de l'annuaire pour accueillir les utilisateurs et les groupes. Pour cela on crée le fichier /tmp/base.ldif:

dn: ou=People,dc=mondomaine,dc=tld
ou: People
objectClass: top
objectClass: organizationalUnit ...
more ...


Sauvegarde et restauration d'un serveur LDAP

Sauvegarde des données d'un serveur LDAP

Pour cela il suffit de sauvegarder la base dans un fichier LDIF. Le dump de la base LDAP s'effectue à l'aide de la commande slapcat:

# slapcat > base.ldif

Restauration des données d'un serveur LDAP

Pour charger le fichier dans le ...

more ...