389-ds 同步软件

389-ds 是用来同步AD密码到ldap的软件

这里有详细安装过程

参考

我用上面那个网站的方法安装里,如果直接运行 setupssl.sh 后面就没法登录了,

后来是按照下面回复的一个网友的方法折腾好的.

 

echo -n “Creating password and noise file…”
#cd /etc/dirsrv/slapd-fw (My server instance is fdsserver,and the fully qualified domain name is fw.test.net)
echo “12345″ > /etc/dirsrv/slapd-fw/pwdfile.txt
echo “12345″ > /etc/dirsrv/slapd-fw/noise.txt
echo -n “Creating Databases…”
#certutil -N -d . -f pwdfile.txt
echo -n “Generating encryption key…”
#certutil -G -d . -z noise.txt -f pwdfile.txt
echo -n “Generating self-signed certificate…”
#certutil -S -n "CA fw" -s "cn=CAcert" -x -t "CT,," -m 1000 -v 120 -d . -z noise.txt -f pwdfile.txt
echo -n “Generating server certificate..”
#certutil -S -n "FW-cert" -s "cn=fw.test.net" -c "CA fw" -t "u,u,u" -m 1001 -v 120 -d . -z noise.txt -f pwdfile.txt
mv key3.db slapd-msas-key3.db
mv cert8.db slapd-msas-cert8.db
ln -s slapd-msas-key3.db key3.db
ln -s slapd-msas-cert8.db cert8.db
echo -n “Setting permissions..”
chown ldap.ldap *
echo -n “Exporting certificate..”
#certutil -L -d . -n "CA fw" -r > cacert.der
echo “Converting certificate..”
openssl x509 -inform DER -in cacert.der -outform PEM -out cacert.pem
echo “Copying cacert.pem to /etc/openldap/cacerts..”
cp cacert.pem /etc/openldap/certs/