voici un tutoriel que l'on ma donné pour ldap (il marche bien , mais il faut un peu l'adapter )
OPENLDAP
https://www.server-world.info/en/note?os=CentOS_7&p=openldap
en tant que root
Install OpenLDAP Server
yum install openldap-servers openldap-clients
cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG
chown ldap. /var/lib/ldap/DB_CONFIG
systemctl start slapd
systemctl enable slapd
Set OpenLDAP admin password
slappasswd
New password: pass
Re-enter new password: pass
{SSHA}zmitCUZZ6iQ8VAsWbpN3KLIQ/AzcQ+R7
cd
vi chrootpw.ldif
# specify the password generated above for "olcRootPW" section
dn: olcDatabase={0}config,cn=config
changetype: modify
add: olcRootPW
olcRootPW: {SSHA}zmitCUZZ6iQ8VAsWbpN3KLIQ/AzcQ+R7
ldapadd -Y EXTERNAL -H ldapi:/// -f chrootpw.ldif
Import basic Schemas
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/cosine.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/nis.ldif
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/inetorgperson.ldif
Set your domain name on LDAP DB
cd
vi chdomain.ldif
# replace to your own domain name for "dc=***,dc=***" section
# specify the password generated above for "olcRootPW" section
dn: olcDatabase={1}monitor,cn=config
changetype: modify
replace: olcAccess
olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth"
read by dn.base="cn=Manager,dc=formation-alfresco,dc=fr" read by * none
dn: olcDatabase={2}hdb,cn=config
changetype: modify
replace: olcSuffix
olcSuffix: dc=formation-alfresco,dc=fr
dn: olcDatabase={2}hdb,cn=config
changetype: modify
replace: olcRootDN
olcRootDN: cn=Manager,dc=formation-alfresco,dc=fr
dn: olcDatabase={2}hdb,cn=config
changetype: modify
add: olcRootPW
olcRootPW: {SSHA}zmitCUZZ6iQ8VAsWbpN3KLIQ/AzcQ+R7
dn: olcDatabase={2}hdb,cn=config
changetype: modify
add: olcAccess
olcAccess: {0}to attrs=userPassword,shadowLastChange by
dn="cn=Manager,dc=formation-alfresco,dc=fr" write by anonymous auth by self write by * none
olcAccess: {1}to dn.base="" by * read
olcAccess: {2}to * by dn="cn=Manager,dc=formation-alfresco,dc=fr" write by * read
ldapmodify -Y EXTERNAL -H ldapi:/// -f chdomain.ldif
cd
vi basedomain.ldif
# replace to your own domain name for "dc=***,dc=***" section
dn: dc=formation-alfresco,dc=fr
objectClass: top
objectClass: dcObject
objectclass: organization
o: Formation Alfresco
description: Annuaire pour la formation Alfresco
dc: formation-alfresco
dn: cn=Manager,dc=formation-alfresco,dc=fr
objectClass: organizationalRole
cn: Manager
description: Directory Manager
dn: ou=People,dc=formation-alfresco,dc=fr
objectClass: organizationalUnit
ou: People
dn: ou=Group,dc=formation-alfresco,dc=fr
objectClass: organizationalUnit
ou: Group
ldapadd -x -D cn=Manager,dc=formation-alfresco,dc=fr -W -f basedomain.ldif
If Firewalld is running, allow LDAP service. LDAP uses 389/TCP.
firewall-cmd --add-service=ldap --permanent
firewall-cmd --reload
voila bon courage.
Maxime.
