DevDungeon Wiki

User Tools

Site Tools

Trace:
other:ldap

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
other:ldap [2021/04/03 21:52]
nanodano [OpenLDAP] 		other:ldap [2021/04/03 22:04] (current)
nanodano [web2ldap]
Line 93: Line 93:
 crontab -e  # As root crontab -e  # As root
  
-# And add the following line to renew at 3:24am on 3rd day of month+# And add the following line to renew at 4:24am on 3rd day of month
 24 4 3 * *  certbot renew --post-hook "systemctl restart slapd" 24 4 3 * *  certbot renew --post-hook "systemctl restart slapd"
 </code> </code>
- 
-TODO: Setup certbot auto renew, with a post hook to restart slapd 
  
 At this point you can use StartTLS on the ldap:// port. At this point you can use StartTLS on the ldap:// port.
Line 164: Line 162:
 ==== Apache Directory Studio ==== ==== Apache Directory Studio ====
  
-[[https://directory.apache.org/studio/|Apache Directory Studio]], a desktop application for interacting with any LDAP server.+[[https://directory.apache.org/studio/|Apache Directory Studio]], a desktop application for interacting with any LDAP server. It didn't work with Java 14 and I needed OpenJDK 11 as of March 2021. Download OpenJDK from [[https://adoptopenjdk.net]]. 
 + 
 +To add a new server connection, go to ''New LDAP Browser | LDAP Connection''. 
 +Use Simple Authentication, NOTE: When setting up the connection, and it asks about ''Edit Options'', you might choose ''Always use REPLACE'' otherwise you might get errors when trying to modify certain values with an error like "noSuchAttribute". 
 + 
 +To add a user, right click on the top level object and add New Entry (Create from Scratch). 
 +Give it two object classes: ''organizationalRole'' and ''simpleSecurityObject''. 
 +Give it RDN of ''cn'' and then it will ask for a password. 
 + 
  
 ==== JXplorer ==== ==== JXplorer ====
 +
 +[[http://jxplorer.org|JXplorer]] is a GUI application for interacting with LDAP servers, though it's not the best. It does not seem to support StartTLS, only plain-text and LDAPS. I have not used it a ton, but I found it to be kind of weak and Apache Directory Studio seems much more featured.
  
 ==== web2ldap ==== ==== web2ldap ====
  
-Libraries+[[https://www.web2ldap.de|web2ldap]] is a web application for managing LDAP servers. 
 + 
 +To install it in Debian, 
 + 
 +<code bash> 
 +sudo apt install python3-venv rustc python3-dev libsasl2-dev libldap2-dev libssl-dev 
 +python3 -m pip install web2ldap 
 +</code> 
 + 
 +To run, it, simply invoke the script provided by the pip package: 
 + 
 +<code bash> 
 +web2ldap 
 +</code> 
 + 
 +Then connect to it in a browser, using the address it outputs. For example. [[http://localhost:1760/web2ldap]] 
 + 
 +Click connect to a server, then click on 'Bind' and do Simple bind, bind as `admin` and then choose identification search, e.g. ''dc=devdungeon,dc=com'' and login. 
 + 
 +When you CLICK into an OU or group, your whole context changes. When you click "new Entry", it will add that entry in the location based on your breadcrumbs at the top. Be careful it's not nesting it under something unexpected. 
 + 
 +To move a user, go to Tree, view user, and click Rename on right side. Change superior DN to include the new OU info. 
  
 ==== Python Library ==== ==== Python Library ====
Line 223: Line 254:
 ==== Java Library ==== ==== Java Library ====
  
-https://directory.apache.org/api/+There is a Java library provided by the Apache Directory project: [[https://directory.apache.org/api/]]. You can use this to interact with LDAP servers in Java.
  
  
other/ldap.1617486777.txt.gz · Last modified: 2021/04/03 21:52 by nanodano

Page Tools

Valid HTML5 Valid CSS