User talk:Haoqili - Revision history

Haoqili: I moved the notes I had from my personal wiki here. I'm destroying my personal wiki.

2011-03-23T18:18:45Z

I moved the notes I had from my personal wiki here. I'm destroying my personal wiki.

Tsitkova: Added note for fixing "error: libldap not found or missing ldap_init"

2011-03-03T14:31:15Z

Added note for fixing "error: libldap not found or missing ldap_init"

Haoqili: /* Figuring out stuff */

2009-08-21T19:22:30Z

‎Figuring out stuff

Haoqili: /* Starting Over */

2009-08-15T22:58:38Z

‎Starting Over

Haoqili: /* Ubuntu */

2009-08-15T22:56:38Z

‎Ubuntu

Haoqili: /* Ubuntu Terminal */

2009-08-15T22:54:12Z

‎Ubuntu Terminal

Haoqili: /* LDAP notes */

2009-08-12T19:19:32Z

‎LDAP notes

Haoqili: /* Shell */

2009-08-12T15:23:12Z

‎Shell

Haoqili: /* Shell */

2009-08-11T14:04:38Z

‎Shell

Haoqili: /* Ubuntu Terminal */

2009-08-11T14:01:24Z

‎Ubuntu Terminal

← Older revision		Revision as of 18:18, 23 March 2011
Line 826:		Line 826:
	* src/kadmin/dbutil/kdb5_ldap_util		* src/kadmin/dbutil/kdb5_ldap_util
	* src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util		* src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util
		+
		+	== Ldap notes (from notes I saved elsewhere) ==
		+	=== 1. Information about the system ===
		+	- packages
		+	* Version of ubuntu
		+	lsb_release -a
		+	No LSB modules are available.
		+	Distributor ID: Ubuntu
		+	Description: Ubuntu 9.04
		+	Release: 9.04
		+	Codename: jaunty
		+	* Version of slapd: 2.4.15 (Mar 19 2009)
		+	slapd -V
		+	@(#) $OpenLDAP: slapd 2.4.15 (Mar 19 2009 10:08:25) $
		+	buildd@palmer:/build/buildd/openldap-2.4.15/debian/build/servers/slapd
		+
		+	* Version of ldap-utils: 2.4.15
		+	dpkg -l ldap-utils
		+
		+	=== 2. Kerb Schema Operations ===
		+	[https://help.ubuntu.com/9.04/serverguide/C/serverguide.pdf loosely following section 6.4]
		+
		+	[[kerberos.schema]]
		+	schema --> ldif
		+	populate all the directories
		+
		+	=== 3. ldap/slapd configuration changes ===
		+	take out lines, modify lines
		+
		+	=== 4. Extract krb conf files ===
		+
		+	=== 5. Env ===
		+
		+	=== 6. Build kerb. config ===
		+
		+
		+	* You'll need a test OpenLDAP server. To get this, you'll need to
		+	install the slapd package (for the server program) and the ldap-utils
		+	package (for ldapsearch). You can set the "domain" of your LDAP server
		+	using "sudo dpkg-reconfigure slapd". I will assume example.com below.
		+	I believe this will also prompt you for an admin password.
		+
		+	* You'll need to copy kerberos.schema from the source tree
		+	(src/plugins/kdb/ldap/libkdb_
		+	ldap/kerberos.schema)
		+	into /etc/ldap/schema.
		+
		+	* In /etc/default/slapd, search for SLAPD_SERVICES and set it to:
		+
		+	SLAPD_SERVICES="ldapi:///"
		+
		+	This will restrict access to the local machine.
		+
		+	* You may want to get familiar with the ldapsearch program. Here's an
		+	example of how to use it against the test server installed above:
		+
		+	ldapsearch -H ldapi:/// -x -W -D cn=admin,dc=example,dc=com -LLL -b
		+	dc=example,dc=com
		+
		+	This command displays all of the entries in your LDAP database. The
		+	-H option and argument indicate the URI of the LDAP server; ldapi:///
		+	means "a Unix-domain socket on the local machine". -x means to use
		+	simple authentication and -W means to prompt for a password (the admin
		+	password you chose previously). The -D option and argument specify the
		+	"bind DN", which you can think of as a username. The -LLL option
		+	shortens the output format a bit; you can leave that out if you want.
		+	The -b option specifies the base of the query; in this case, the whole
		+	thing. It's also worth reading the man page for the meaning of the -s
		+	option (restrict the scope of the query) and for the filter syntax.
		+
		+	* To build Kerberos with LDAP back end support, you need to install the
		+	libldap2-dev package, and configure with --with-ldap.
		+
		+	* Configuring your KDC is similar to setting up a normal KDC, but your
		+	dbmodule directive will look something like this:
		+
		+	[dbmodules]
		+	LDAP = {
		+	db_library = kldap
		+	ldap_kerberos_container_dn = cn=krbcontainer,dc=example,dc=com
		+	ldap_kdc_dn = cn=admin,dc=example,dc=com
		+	ldap_kadmind_dn = cn=admin,dc=example,dc=com
		+	ldap_service_password_file = /usr/local/var/krb5kdc/admin.stash
		+	ldap_servers = ldapi:///
		+	}
		+
		+	(In a real deployment, you would probably create user DNs for the KDC
		+	and kadmin rather than using the admin DN, and grant them the minimum
		+	necessary access. But creating users in an OpenLDAP database didn't
		+	appear straightforward to me, so I skipped that step in my testing.)
		+
		+	* When you create your database, instead of using kdb5_util, you use
		+	kdb5_ldap_util, like so:
		+
		+	kdb5_ldap_util -D cn=admin,dc=example,dc=com -H ldapi:/// create \
		+	-r EXAMPLE.COM -sf /usr/local/var/krb5kdc/admin.stash -s
		+
		+	You'll have to enter your OpenLDAP admin pasword, which will be stored
		+	in the admin.stash file for use by the KDC and kadmind.
		+
		+	There is more information in the krb5 admin guide (see the doc subdir of
		+	your source tree).

← Older revision		Revision as of 14:31, 3 March 2011
Line 727:		Line 727:

	:So Greg says: "I think maybe your OpenLDAP source installation in /usr/local/lib is messing up the system library." So it might be better if I start a new Ubuntu virtual machine without being stupid and compiling the entire OpenLDAP.		:So Greg says: "I think maybe your OpenLDAP source installation in /usr/local/lib is messing up the system library." So it might be better if I start a new Ubuntu virtual machine without being stupid and compiling the entire OpenLDAP.
		+
		+	NOTE: One of the solutions is to change the default configuration from /usr/local/lib to /usr/lib in /etc/ld.so.conf.d/libc.conf. Then run /sbin/ldconfig.

	=== Starting Over ===		=== Starting Over ===

← Older revision		Revision as of 19:22, 21 August 2009
Line 821:		Line 821:
	2048 print entry parsing debugging		2048 print entry parsing debugging
	</pre>		</pre>
		+
		+	* src/kadmin/dbutil/kdb5_ldap_util
		+	* src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util

@@ Line 738: / Line 738: @@
 ** autoconf: <code>sudo apt-get install autoconf</code>
 ** <code>sudo apt-get install ncurses-dev</code>
-** yacc: <code>sudo apt-get install b./yacc</code>
+** yacc: <code>sudo apt-get install byacc</code>
 * <code>svn checkout svn://anonsvn.mit.edu/krb5/trunk</code>
 * Navigate to trunk/src

@@ Line 148: / Line 148: @@
 **# Un-comment: <code>#force_color_prompt=yes</code> by deleting the #
 **# Open a new terminal to see the result
 * Change root password:
 ** Reboot

@@ Line 139: / Line 139: @@
 ::</pre>
-=== Ubuntu Terminal ===
+=== Ubuntu ===
 * Change computer name: <code>gksudo gedit /etc/hostname</code>
 * Change Colors
@@ Line 148: / Line 148: @@
 **# Un-comment: <code>#force_color_prompt=yes</code> by deleting the #
 **# Open a new terminal to see the result
 * The Caps Lock light is reversed.
 : Reset Caps  Lock: <code>xmodmap -e "remove Lock = Caps_Lock"</code> and then <code>xmodmap -e "add Lock = Caps_Lock"</code>

← Older revision		Revision as of 19:19, 12 August 2009
Line 692:		Line 692:
	* 9: <b> To run it: <code>sudo /usr/local/sbin/kdb5_ldap_util -D cn=admin,dc=example,dc=com -H ldapi:/// create -r EXAMPLE.COM -sf /usr/local/var/krb5kdc/admin.stash -s</code></b>		* 9: <b> To run it: <code>sudo /usr/local/sbin/kdb5_ldap_util -D cn=admin,dc=example,dc=com -H ldapi:/// create -r EXAMPLE.COM -sf /usr/local/var/krb5kdc/admin.stash -s</code></b>

		+	=== Figuring out stuff ===
		+	* [ https://help.ubuntu.com/9.04/serverguide/C/serverguide.pdf good guide]
		+	** Locate the kerberos schema:
		+	:: /etc/ldap/schema/kerberos.schema
		+	:* Create this file:
		+	:: sudo vim /etc/ldap/schema/schema_testing.conf
		+	<pre>
		+	include /etc/ldap/schema/core.schema
		+	include /etc/ldap/schema/collective.schema
		+	include /etc/ldap/schema/corba.schema
		+	include /etc/ldap/schema/cosine.schema
		+	include /etc/ldap/schema/duaconf.schema
		+	include /etc/ldap/schema/dyngroup.schema
		+	include /etc/ldap/schema/inetorgperson.schema
		+	include /etc/ldap/schema/java.schema
		+	include /etc/ldap/schema/kerberos.schema
		+	include /etc/ldap/schema/nis.schema
		+	include /etc/ldap/schema/openldap.schema
		+	include /etc/ldap/schema/ppolicy.schema
		+	</pre>
		+	:* Make the temp dir to hold output:
		+	:: mkdir /tmp/ldifoutput
		+	:* Convert schema --> LDIF with slaptest:
		+	:: slaptest -f schema_testing.conf -F /tmp/ldifoutput
		+	:* Edit /tmp/ldifoutput/cn=config/cn=schema/cn={8}kerberos.ldif
		+	:: sudo vi /tmp/ldifoutput/cn\=config/cn\=schema/cn\=\{8\}kerberos.ldif
		+	<pre>
		+	change dn: cn={8}kerberos into
		+	dn: dn: cn=kerberos,cn=schema,cn=config
		+
		+	change cn: {8}kerberos into
		+	cn: kerberos
		+
		+	remove lines:
		+	structuralObjectClass: olcsch...
		+	till end
		+	<pre>
		+	:* Start the slapd
		+	:: sudo slpad -h ldapi:/// -F /etc/ldap/slapd.d/
		+	:: The "-F" is for slapd-config-directory
		+	:*
	=== LDAP notes ===		=== LDAP notes ===

@@ Line 171: / Line 171: @@
 * Avoid typing in sudo password everytime:
-*: Edit <code>/etc/sudoer</code> such that under the line <code> root ALL=(ALL) ALL</code>, this line is added: <code> root ALL=(ALL) ALL</code>
+*: Edit <code>/etc/sudoers</code> such that under the line <code> root ALL=(ALL) ALL</code>, this line is added: <code> [username] ALL=(ALL) ALL</code>
 * Add a path as the first option in a path

← Older revision		Revision as of 14:04, 11 August 2009
Line 181:		Line 181:

	* <code>pkill</code> doesn't always work. Use <code>pkill -9</code> or <code>pkill -15</code> instead. Same with <code>sudo kill</code>.		* <code>pkill</code> doesn't always work. Use <code>pkill -9</code> or <code>pkill -15</code> instead. Same with <code>sudo kill</code>.
		+
		+	* A Debugger! :D <code>gdb [command]</code>

	=== Python ===		=== Python ===