[SMS]

toothandnail · Posted: Sun Apr 03, 2011 1:57 pm Post subject: OpenLDAP question

Sorry, more dumb questions. I'm too used to packages like SME which hide a lot of the configuration. Lots of learning still to do....

I noticed while exploring Webmin that it was complaining about being unable to log into the OpenLDAP server due to an encrypted password. I couldn't find any reference to the password for the OpenLDAP server, but I did find this in the Wiki:

gerasimos_h · Posted: Sun Apr 03, 2011 2:27 pm Post subject:

Password is toor also stated as
PHPLdapAdmin: toor
in default passwords.
You can change it through webmin or with slappasswd as described in Securing and Optimizing SMS
You can edit module config of webmin/ldap server and add the ldap password.

When running netconfig or netconfig-lcd, it edit /etc/openldap/sms.ldif and replace sms.org with your hostname.domain, but netconfig run at installation so slapd isn't running so can't flush db and recreate it, that's why the ldapadd command.
So either skip netconfig and run netconfig-lcd after your first boot or import database manually with ldapadd.

netconfig replace sms.org with your new hostname.domain
netconfig-lcd replace your current hostname.domain with your new hostname.domain

gerasimos_h

janekX · Junior Member Joined: 17 Apr 2011 Posts: 5

have changed passwd in PHPMyAdmin
then have changed passwd by slappasswd and placed it into slapd.conf
and i did use the netconfig-lcd

...still can't use ldap, looks like need to study openldap doc

gerasimos_h · Posted: Sun Apr 17, 2011 9:48 pm Post subject:

I believe you mean phpldapadmin and not phpmyadmin.
Once you log in in phpldapadmin change the password for
cn=Manager and uid=administrator
The password in slapd.conf has to do with ldap and other programs, but
you need to alter the password for cn=Manager in phpldapadmin too.
and of course restart openldap

janekX · Junior Member Joined: 17 Apr 2011 Posts: 5

janekX · Junior Member Joined: 17 Apr 2011 Posts: 5

did read some text from openldap doc
so I have found that I have to enter passwd in Webmin LdapServerConfiguration
::Password for root user, so I see LDAP Users and Groups but can't
add user or group:
Failed to save group : Failed to add group to LDAP database : objectClass: value #1 invalid per syntax
-with Samba group=Yes, and without :
Failed to save group : Failed to add group to LDAP database : no global superior knowledge

as toothandnail said...lots of learning still...

don't want to spam here, b.r.

gerasimos_h · Posted: Tue Apr 19, 2011 8:52 am Post subject:

janekX · Junior Member Joined: 17 Apr 2011 Posts: 5

really strange, nothing happens when I click create... ldap is running

when I use
ldapadd -f /etc/openldap/sms.ldif -x -D cn=Manager,dc=[yourhostname],dc=[yourdomain] -w [yourpassword]
it says:
ldap_add: Naming violation (64)
additional info: value of single-valued naming attribute 'dc' conflicts with value present in entry
i will try from beginning..but need to learn/rad about those things from openldap
doc,

janekX · Junior Member Joined: 17 Apr 2011 Posts: 5