Compilación y configuración de ldap-3.3

• Lo primero ha sido conseguir el paquete ldap-3.3

• Después se desempaqueta el archivo y se cambian algunas lineas en el fichero Make-common
  INSTROOT=/usr/local
  por
  INSTROOT=/opt/ldap

  y las líneas

  #HAVEISODE = yes
  # If you compiled ISODE with TURBO_DISK defined, uncomment this
  #ISODETURBOLIBS = -lgdbm
  # uncomment these to have ldapd "pretty print" protocol elements w/debugging
  #PEPSY_DUMP=-DPEPSY_DUMP
  #PEPSY=/usr/local/ic/bin/pepsy
  # uncommment this line to have ldapd load PP syntax handlers
  # you'll also need to add -lpp to ISODEBASELIBS below
  #LDAP_USE_PP=-DLDAP_USE_PP
  # uncomment NO_SETPROCTITLE to have ldapd NOT change its title
  #NO_SETPROCTITLE=-DNOSETPROCTITLE
  #
  # ISODE Consortium release build settings
  # You should change the next line so that ICRELEASE matches the (integer)
  # version number of whatever IC release you have, e.g. 1, 2, or 3 and
  # also uncomment the next 5 lines.
  #ICRELEASE=-DICRELEASE=1
  #ISODEPACKAGE=-DISODEPACKAGE=IC
  #ISODEINCLUDEFLAG= -I/usr/local/ic/include/isode -I/usr/local/ic/include
  #ISODELIBFLAG   = -L/usr/local/ic/lib
  #ISODEBASELIBS  = -lisode
  

  por

  HAVEISODE = yes
  # If you compiled ISODE with TURBO_DISK defined, uncomment this
  ISODETURBOLIBS  = -lgdbm
  # uncomment these to have ldapd "pretty print" protocol elements w/debugging
  PEPSY_DUMP=-DPEPSY_DUMP
  PEPSY=/opt/Isode/bin/pepsy
  # uncommment this line to have ldapd load PP syntax handlers
  # you'll also need to add -lpp to ISODEBASELIBS below
  #LDAP_USE_PP=-DLDAP_USE_PP
  # uncomment NO_SETPROCTITLE to have ldapd NOT change its title
  #NO_SETPROCTITLE=-DNOSETPROCTITLE
  #
  # ISODE Consortium release build settings
  # You should change the next line so that ICRELEASE matches the (integer)
  # version number of whatever IC release you have, e.g. 1, 2, or 3 and
  # also uncomment the next 5 lines.
  ICRELEASE=-DICRELEASE=4
  ISODEPACKAGE=-DISODEPACKAGE=IC
  ISODEINCLUDEFLAG= -I/opt/Isode/include -I/opt/Isode/include/isode
  ISODELIBFLAG    = -L/opt/Isode/lib
  ISODEBASELIBS   = -lisode
  

  y en lo que respecta a DBM, las líneas

  # gnu dbm (gdbm)
  #LDBMBACKEND=-DLDBM_USE_GDBM
  #LDBMINCLUDE=-I/usr/local/gdbm/include
  #LDBMLIB=-lgdbm
  

  se descomentan, quedando

  # gnu dbm (gdbm)
  LDBMBACKEND=-DLDBM_USE_GDBM
  LDBMINCLUDE=-I/usr/local/gdbm/include
  LDBMLIB=-lgdbm
  

  tan solo resta otra modificación

  # Otherwise, uncomment this line and set the following options.
  #STR_TRANSLATION=-DSTR_TRANSLATION
  #
  # remove the defines for LDAP client library T.61 character translation
  # you do not need.  If you use LDAP_CHARSET_8859, replace the '1' in "88591"
  # with the number of the particular character set you use.  E.g., use "88594"
  # if you use the ISO 8859-4 chracter set.
  #LIBLDAP_CHARSETS=-DLDAP_CHARSET_8859="88591"
  #
  # uncomment one these lines to enable automatic T.61 translation by default
  #LIBLDAP_DEF_CHARSET=-DLDAP_DEFAULT_CHARSET=LDAP_CHARSET_8859
  

  por esto

  # Otherwise, uncomment this line and set the following options.
  STR_TRANSLATION=-DSTR_TRANSLATION
  #
  # remove the defines for LDAP client library T.61 character translation
  # you do not need.  If you use LDAP_CHARSET_8859, replace the '1' in "88591"
  # with the number of the particular character set you use.  E.g., use "88594"
  # if you use the ISO 8859-4 chracter set.
  LIBLDAP_CHARSETS=-DLDAP_CHARSET_8859="88591"
  #
  # uncomment one these lines to enable automatic T.61 translation by default
  LIBLDAP_DEF_CHARSET=-DLDAP_DEFAULT_CHARSET=LDAP_CHARSET_8859
  

• Editado el fichero include/ldapconfig.h.edit, cambiado

  #define DEFAULT_BASE "o=Your Organization Name, c=US"

  por

  #define DEFAULT_BASE "o=Universidad de Murcia bis, c=ES"

• Si vamos a incluir certificados, debemos editar el fichero servers/ldapd/syntax.c y tras la línea

          ldap_certif_syntax = get_one_syntax( "userCertificate", 0 );
  

  añadimos

          ldap_certif_syntax = get_one_syntax( "userCertificate;binary", 0 );
  

• Se compila y posteriormente procedemos a la instalación

  # make
  # make test
  # make install

• Para comprobar que funciona correctamente, se puede lanzar en modo debug y ver que responde peticiones ldap (suponiendo que tenemos usuarios en el DSA jaguarbis tecleamos /opt/ldap/bin/ldapsearch "cn=ALFONSO*" cn)

  # /opt/ldap/etc/ldapd -c jaguarbis -d 31

• Se crea un fichero /etc/init.d/ldapd y se crea el enlace adecuado:

  # ln -s /etc/init.d/ldapd /etc/rc2.d/S83ldapd

• Puesto que deseamos log's queda poner la línea en el fichero syslog.conf (y hacer un kill -HUP al proceso syslogd)

  # Para conexiones ldap
  local4.debug                                    /opt/Isode/tmp/ldapd.log
  

Servicio de Informática de la Universidad de Murcia - http://www.um.es/si Última actualización: 22/06/99