@@gloryg2989 Which customer are you talking about? a client for user authentication? or a client for using LDAP (creation/modification of users, groups, etc.)?
@@SystemsandInfrastructure can you please tell me if I have to install configure and basic security for slapd…what all I need to do can you provide me the links please
I am getting the following error although I installed the Cyrus-SASL libs , can you pls advise. I am installing OpenLDAP 2.5.7 on CentOS 8 configure: error: Could not locate Cyrus SASL
The default access rules allow access by the system root user only. root may query or search the database using ldap tools with SASL EXTERNAL authentication. Otherwise it is necessary to enter a username and password each time.
I am trying to add a new ldap user example- John, but the user John already exists in /etc/passwd. Can I still able to add John as ldap user ? Appreciate your response.
Yes, this is among the objectives of LDAP, it is to be able to centralize authentication, users and groups must be created first as UNIX users and groups then in the LDAP database. otherwise it won't work.
Hi there, can you kindly advise if it is still fine to install OpenLDAP server in RHEL 8 because from what i know, RHEL will not support OpenLDAP anymore starting version 8? Please enlighten and thanks in advance!
Hi, The openldap-servers package was removed in Red Hat Enterprise Linux 8. The openldap-clients package is still shipped though. because redhat has opted for 2 of these products in order to accomplish this identity server task. - Red Hat Directory Server (RHDS): is provided as an add-on subscription in RHEL8, so you need buy the subscriptions in addition to RHEL subscription. - Identity Management (IdM) which is included in Red Hat 8. but Openldap is still supported if you install it independently, as I did in this video and with the same method I installed it several times on RHEL 8.
is there a way to configure openldap without the "ca" certificate? I just need authorization through openldap with the creation of the users home folder with a minimal set of the openldap server itself.
I have never tried it, but I know it is possible. on the other hand it is not very recommended because the certificate guarantees a minimum of security.
@@SystemsandInfrastructure My system's network configuration excludes external connections physically, and openldap is deployed on it very often. Using your videos, I managed to install and configure the openldap server (without using keys), but setting up the client is not very good, I would be grateful if you post instructions for setting up the client on os centos8.
@@SystemsandInfrastructure when I use the slap add and modify commands the server replies "insufficent access (50)" do you have any ideas to solve the problem?
Thank you for the video. I find it very useful for my project. Could you tell me do we have to install slapd client after this ?
Yes, you must install and configure the ldap client on the client workstations. If you search on google you will find many tutorials.
@@SystemsandInfrastructure thank you can the client be installed on the same machine where the server is installed
@@gloryg2989 Which customer are you talking about? a client for user authentication? or a client for using LDAP (creation/modification of users, groups, etc.)?
@@SystemsandInfrastructure client for using ldap
@@SystemsandInfrastructure can you please tell me if I have to install configure and basic security for slapd…what all I need to do can you provide me the links please
Thank you for the video. I’ve installed openldap on Centos 8,How do we know if the ldap server is up and running ?
systemctl status slapd.service
I am getting the following error although I installed the Cyrus-SASL libs , can you pls advise.
I am installing OpenLDAP 2.5.7 on CentOS 8
configure: error: Could not locate Cyrus SASL
If you have any questions, ask them in the comments.
where can i get full version of sudo.ldif?
mega.nz/file/g4VWyJwb#UIs5bt7JbCXkhdIpf-kgYblw1hNf59Z8oHnjWZroTac
I just can't figure out what "-Y EXTERNAL" does, why should it be added to each slapadd action when adding a domain, groups, users?
The default access rules allow access by the system root user only. root may query or search the database using ldap tools with SASL EXTERNAL authentication. Otherwise it is necessary to enter a username and password each time.
@@SystemsandInfrastructure thank you
where can I find the documented guidelines for this video? thanks in advance.
I am trying to add a new ldap user example- John, but the user John already exists in /etc/passwd. Can I still able to add John as ldap user ? Appreciate your response.
Yes, this is among the objectives of LDAP, it is to be able to centralize authentication, users and groups must be created first as UNIX users and groups then in the LDAP database. otherwise it won't work.
Hi there, can you kindly advise if it is still fine to install OpenLDAP server in RHEL 8 because from what i know, RHEL will not support OpenLDAP anymore starting version 8? Please enlighten and thanks in advance!
Hi,
The openldap-servers package was removed in Red Hat Enterprise Linux 8. The openldap-clients package is still shipped though.
because redhat has opted for 2 of these products in order to accomplish this identity server task.
- Red Hat Directory Server (RHDS): is provided as an add-on subscription in RHEL8, so you need buy the subscriptions in addition to RHEL subscription.
- Identity Management (IdM) which is included in Red Hat 8.
but Openldap is still supported if you install it independently, as I did in this video and with the same method I installed it several times on RHEL 8.
is there a way to configure openldap without the "ca" certificate? I just need authorization through openldap with the creation of the users home folder with a minimal set of the openldap server itself.
I have never tried it, but I know it is possible. on the other hand it is not very recommended because the certificate guarantees a minimum of security.
@@SystemsandInfrastructure My system's network configuration excludes external connections physically, and openldap is deployed on it very often. Using your videos, I managed to install and configure the openldap server
(without using keys), but setting up the client is not very good, I would be grateful if you post instructions for setting up the client on os centos8.
Give me your email address and I will send you the outline of the configuration of a CentOS 8 client. Finally the method I use.
@@SystemsandInfrastructure barmadron@yandex.ru
Hi, I'm curious as to what UI you're using?
MobaXterm
would you be able to put a txt file with all the commands to copy and paste?
Sorry I don't have the commands in txt file, However on this video th-cam.com/video/n3PxDEVSdtQ/w-d-xo.html you will find all the ldif files.
@@SystemsandInfrastructure Okok, Thanks so much. You did a good tutorial
@@lorenzomaraspin1793 Thank you
@@SystemsandInfrastructure when I use the slap add and modify commands the server replies "insufficent access (50)" do you have any ideas to solve the problem?
share with me the command you are using.