CentOS 7.x setup 389-DS

<yambe:breadcrumb>CentOS_7.x_389DS|CentOS 7.x 389DS</yambe:breadcrumb>

CentOS 7.x setup 389-DS

To configure 389-DS on CentOS 7.x use following steps:

1. Make entry in /etc/hosts

   192.168.123.13 ldap.sbarjatiya.com ldap

2. create /etc/sysctl.d/10-ldap.conf file and enter below lines

   net.ipv4.tcp_keepalive_time = 300
   net.ipv4.ip_local_port_range = 1024 65000
   fs.file-max = 64000

3. Add the following lines at the bottom of /etc/security/limits.conf

   *               soft     nofile          8192
   *               hard     nofile          8192

4. Add the line at the end of /etc/profile

   ulimit -n 8192

5. Add the line at the end of /etc/pam.d/login

   session    required     /lib/security/pam_limits.so

6. Restart the server

   shutdown -r now

7. Install epel & remi repository

   yum install -y epel-release
   wget http://rpms.famillecollet.com/enterprise/remi-release-7.rpm
   rpm -Uvh remi-release-7.rpm

8. Create a LDAP user account

   useradd ldapadmin
   passwd ldapadmin

9. Install 389-ds and dependency packages

   yum install -y 389-ds-base openldap-clients idm-console-framework 389-adminutil 389-admin 389-admin-console 389-console 389-ds-console

10. Configure LDAP server using ' setup-ds-admin.pl' command

    Would you like to continue with set up? [yes]:
    Would you like to continue? [yes]:
    Choose a setup type [2]:
    Computer name [ldap]: ldap.sbarjatiya.com
    System User [dirsrv]: ldapadmin
    System Group [dirsrv]: ldapadmin
    configuration directory server? [no]:
    administrator ID [admin]:
    password:
    Administration Domain [sbarjatiya.com]:
    Directory server network port [389]:
    Directory server identifier [ldap]:
    Suffix [dc=sbarjatiya, dc=com]:
    Directory Manager DN [cn=Directory Manager]:
    password:
    Administration port [9830]:
    Are you ready to set up your servers? [yes]:

11. Start & enable 389-ds services

    systemctl enable dirsrv.target
    systemctl enable dirsrv-admin
    systemctl start dirsrv.target
    systemctl start dirsrv-admin

12. Test LDAP server

    ldapsearch -x -b "dc=sbarjatiya,dc=com"

13. Connect using 389-console at http://ldap.sbarjatiya.com:9830/ with username admin and selected Directory Manager password.

Refer:

• https://www.unixmen.com/install-and-configure-ldap-server-in-centos-7/

Steps contributed by Pavan Ponamala

<yambe:breadcrumb>CentOS_7.x_389DS|CentOS 7.x 389DS</yambe:breadcrumb>