图文介绍openLDAP在windows上的安装配置

目录

  • 概述
  • 测试环境
  • 安装过程
  • 配置启动
  • 客户端介绍
  • 多级DC的ldif文件的配置

[一]、概述

什么叫LDAP呢,概念的东西这里就不多讲了,网上搜索下有很多,本文的重点是介绍如何在windows平台上安装和配置openLDAP软件。

openLDAP官方网站:http://www.openldap.org/

openLDAP官网只提供了linux平台的相关安装文件,windows平台的安装包可以到以下一些网站下载:

  • http://www.userbooster.de/download/openldap-for-windows.aspx(本文所用的版本
  • http://sourceforge.net/projects/openldapwindows/files/
  • http://sourceforge.jp/projects/openldapwin32/releases/

[二]、测试环境

[三]、安装过程

按照提示 一直 next ,直到安装完成:

安装完成后,在系统服务中,找到 OpenLDAP Service,先停止服务,再把启动类型修改成手动,便于自己的测试。

[四]、配置启动

安装目录:D:\Program Files (x86)\OpenLDAP

编辑文件:D:\Program Files (x86)\OpenLDAP\slapd.conf 找到如下内容:

修改成:

打开控制台,切换到openLDAP安装目录下,启动openLDAP,命令如下:

会在控制台看到类似如下的日志信息:

日志信息:slapd starting 表示服务已经启动好了。

新建一个文件:D:\Program Files (x86)\OpenLDAP\mydemo.ldif ,内容如下:

tips:格式要严格,每行的开头和末尾不能有空格

然后在控制台中切换到openLDAP安装目录下执行ldapadd命令:

参数说明:

  • -x 使用简单验证方式
  • -D 指定管理员DN(与slapd.conf中配置的一致)
  • -W 大写W表示回车后根据提示输入密码,可以使用小写的-w password 直接输入密码
  • -f 需要导入数据LDIF的文件名
  • -h 目录服务器的IP地址

添加成功会显示如下信息:

!!!有网友说:按照我上面的命令,提示:’ldapadd’ 不是内部或外部命令,也不是可运行的程序或批处理文件。经过我的验证发现,该windows版本的openLDAP确实没有这个命令,我能执行成功是因为本机安装过oracle,而Oracle自带安装了LDAP client的一些常用命令。

如果没有”ldapadd“这个命令,还可以用它自带的命令“slapadd”代替导入数据文件。不过要注意的是:和ldapadd命令不同的是:执行slapadd命令前需要先停止之前启动的 slapd 服务(打开服务确定停止了该服务),然后在控制台中切换到openLDAP安装目录下执行命令:

运行结果如下:

ldapadd 和 slapadd 的差异:

  • ldapadd 对本地和远程服务都可以操作,操作时LDAP服务是不能停止
  • slapadd 只能对本地的LDAP服务进行操作,操作时本地LDAP服务必须先停止

验证添加的信息,在控制台中,切换到%OpenLDAP_HOME%/ClientTools 输入查询命令:

查询结果如下:

验证成功。

[五]、客户端介绍

网上搜索到一个客户端:LdapBrowser282  附件提供相关下载:LdapBrowser282.zip

下载解压后直接双击:lbe.bat 文件即可运行。


点击上图中的 Fetch DNs 按钮会自动获取相关的DN信息的。

上面的输入的密码就是之前安装过程中的那个密码(如果自己没有修改过)

可以正确查询到之前添加的相关信息。

[六]、多级DC的ldif文件的配置

在实际应用中我们经常会碰到二级域名,类似:app1.micmiu.com、app2.micmiu.com,那么对应到LDAP中的DC就是多级,这时我们ldif文件又是如何配置呢?下面将给出个示例演示,新建一个文件:D:\Program Files (x86)\OpenLDAP\myappuser.ldif ,内容如下:

tips:注意dc的对应关系,如下图:

然后在控制台窗口中执行ldapadd命令:

添加成功会显示如下信息:

如果 ldapadd 命令无法运行,先停止slapd 服务,然后在控制台中切换到openLDAP安装目录下执行命令:

客户端工具中可以查询到相关信息:

ok,本文到此已经基本介绍完了,以后再详细介绍如何用Java实现对LDAP的相关操作。

原创文章,转载请注明: 转载自micmiu – 软件开发+生活点滴[ http://www.micmiu.com/ ]

本文链接地址: http://www.micmiu.com/enterprise-app/sso/openldap-windows-config/

发表评论?

98 条评论。

  1. 请问楼主,如何实现ppolicy,只用在slapd.conf 里面加这个就好了吗 include ./schema/ppolicy.schema 多谢

  2. 楼主您好,有木有改和删的实例呢,网上的都是Linux,不适用于Windows

  3. 感谢楼主分享
    我在server2008x64上面安装openldap-2.4.38,发现安装界面已经不同了,没有了“Additional Settings”页面
    同样,slapd.conf的位置也变更到了“\OpenLDAP\etc\openldap”
    在未改动slapd.conf的条件下执行“slapd -d 1”启动openLDAP也会出现如下错误信息:
    ldap_url_parse_ext(ldap://localhost/)
    ldap_init: trying .\ldap.conf
    ldap_init: HOME env is NULL
    ldap_init: trying ldaprc
    ldap_init: LDAPCONF env is ..\etc\openldap\ldap.conf
    ldap_init: trying ..\etc\openldap\ldap.conf
    ldap_init: using ..\etc\openldap\ldap.conf
    ldap_init: LDAPRC env is ..\bin\ldaprc
    ldap_init: HOME env is NULL
    ldap_init: trying ..\bin\ldaprc
    ldap_init: using ..\bin\ldaprc
    563ab66f @(#) $OpenLDAP: slapd 2.4.38 (Dec 3 2013 01:42:10) $
    @LONDON:/src/openldap-2.4.38/servers/slapd
    563ab66f daemon_init: ldap://localhost/ ldaps://localhost/
    563ab66f daemon_init: listen on ldap://localhost/
    563ab66f daemon_init: listen on ldaps://localhost/
    563ab66f daemon_init: 2 listeners to open…
    ldap_url_parse_ext(ldap://localhost/)
    563ab66f daemon: bind(2) failed errno=10013 (WSAEACCES)
    563ab66f daemon: bind(3) failed errno=10013 (WSAEACCES)
    563ab66f slap_open_listener: failed on ldap://localhost/
    563ab66f slapd stopped.
    563ab66f connections_destroy: nothing to destroy.

    想问一下楼主:
    新版本的OpenLDAP需要先配置slapd.conf文件才能正常启动吗?

  4. expect poor performance for suffix “dc=maxcrc,dc=com”.
    55ba5677 bdb_db_open: monitoring disabled; configure monitor database to enable
    55ba5677 str2entry: entry -1 has mulitiple DNs “dc=maxcrc,dc=com” and “ou=developer,dc=maxcrc,dc=com”
    slapadd: could not parse entry (line=1)

  5. slapadd -v -l ./*ldif,最后提示slapadd: could not parse entry (line=1)

  6. D:\OpenLDAP>ldapsearch -x -b “dc=micmiu,dc=com” “(objectclass=*)”
    Context Initialization Error

    提交数据
    unable to locate message file: ldap.msb

    怎么解决啊

  7. C:\OpenLDAP> ./slapd.exe -d 1 -f ./slapd.conf
    ldap_url_parse_ext(ldap://localhost/)
    ldap_init: trying %SYSCONFDIR%\ldap.conf
    ldap_init: HOME env is NULL
    ldap_init: trying ldaprc
    ldap_init: LDAPCONF env is NULL
    ldap_init: LDAPRC env is NULL
    515a46fe OpenLDAP 2.4.39 Standalone LDAP Server (slapd)515a46fe daemon_init: listen on ldap:///
    515a46fe daemon_init: 1 listeners to open…
    ldap_url_parse_ext(ldap:///)
    5458bda5 daemon: bind(2) failed error=10012 (WSAEACCES)
    5458bda5 daemon: bind(3) failed error=10012 (WSAEACCES)
    5458bda5 slap_open_listener: failed on ldap:///
    5458bda5 slapd stopped.
    5458bda5 connections_destroy: nothing to destroy.

    C:\OpenLDAP> ./slapdtest.exe -f ./slapd.conf
    5458c1b8 bdb_db_open:database “dc=test,dc=com”:db_open(./data/id2entry.bdb) failed: No such file or directory (2)
    5458c1b8 backend_startup_one (type=bdb, suffix=”dc=test,dc=com”): bi_db_open failed!(2)
    slap_startup_one failed !
    这个错误是什么情况,跟上面报错都不一样,端口号3899没有冲突,环境是windows server 2008

  8. 楼主 你好,为什么配置完,解压282客户端,点击lbe批处理文件时候,只有一个命令行窗口一闪,然后什么也没打开呢?

  9. 楼主你好,为什么用LdapBrowser282时候,点击lbe启动客户端时候,一直是命令行窗口一闪,然后什么也没打开呢?

  10. 碰上了以下的問題

    C:\OpenLDAP>slapadd -v -l ./test.ldif
    5344b503 bdb_db_open: warning – no DB_CONFIG file found in directory ./data: (2)
    .
    Expect poor performance for suffix “dc=galaxy,dc=com”.
    5344b504 bdb_monitor_db_open: monitoring disabled; configure monitor database to
    enable
    _#################### 100.00% eta none elapsed none fast!
    Closing DB…

    ldif裡面有記錄,但是匯入的時候沒有資料。

  11. 楼主,你好,我用ldapsearch -x -b “dc=micmiu,dc=com” “(objectclass=*)”
    进行查询时,出来的结果不一样,求解ing……

    结果如下:
    # extended LDIF
    #
    # LDAPv3
    # base with scope subtree
    # filter: (objectclass=*)
    # requesting: ALL
    #

    # search result
    search: 2
    result: 32 No such object

    # numResponses: 1

  12. 写的不错,网上找了好多资料都是瞎copy的,不负责任.根本就不对的东西就网上贴,楼主费心了。

    • 当初写blog就是因为遇到一样的情况,网上搜索很多结果都是互相copy,很多问题,后来就自己把完整的过程记录下来,方便日后查阅

  13. 根据教程成功配置了LDAP,感谢博主!

  14. 51d3dac3 config_build_entry: build “cn=config” failed: “”
    51d3dac3 backend_startup_one (type=config, suffix=”cn=config”): bi_db_open failed! (-1)
    我也出现此错误

  15. 51cbea35 OpenLDAP 2.4.34 Standalone LDAP Server (slapd)51cbea35 daemon_init: listen on ldap:///
    51cbea35 daemon_init: 1 listeners to open…
    ldap_url_parse_ext(ldap:///)
    51cbea35 daemon: listener initialized ldap:///
    51cbea35 daemon_init: 1 listeners opened
    ldap_create
    51cbea35 slapd init: initiated server.
    51cbea35 slap_sasl_init: initialized!
    51cbea35 bdb_back_initialize: initialize BDB backend
    51cbea35 bdb_back_initialize: Berkeley DB 5.3.21: (May 11, 2012)
    51cbea35 ==>sql_back_initialize()
    51cbea35 translucent_initialize
    51cbea35 bdb_db_init: Initializing BDB database
    51cbea35 >>> dnPrettyNormal:
    51cbea35 <<< dnPrettyNormal: ,
    51cbea35 >>> dnPrettyNormal:
    51cbea35 <<< dnPrettyNormal: ,
    51cbea35 >>> dnNormalize:
    51cbea35 <<< dnNormalize:
    51cbea35 matching_rule_use_init
    51cbea35 1.2.840.113556.1.4.804 (integerBitOrMatch): 51cbea35 matchingRuleUse: ( 1.2.840.113556.1.4.804 NAME ‘integerBitOrMatch’ APPLIES ( supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $ olcListenerThreads $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ olcChainMaxReferralDepth $ olcDbMaxReaders $ olcDbMaxSize $ olcSpSessionlog $ olcSssVlvMax $ olcSssVlvMaxKeys $ olcSssVlvMaxPerConn $ olcPcacheMaxQueries $ olcRetcodeSleep $ olcDDSmaxDynamicObjects $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
    51cbea35 1.2.840.113556.1.4.803 (integerBitAndMatch): 51cbea35 matchingRuleUse: ( 1.2.840.113556.1.4.803 NAME ‘integerBitAndMatch’ APPLIES ( supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $ olcListenerThreads $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ olcChainMaxReferralDepth $ olcDbMaxReaders $ olcDbMaxSize $ olcSpSessionlog $ olcSssVlvMax $ olcSssVlvMaxKeys $ olcSssVlvMaxPerConn $ olcPcacheMaxQueries $ olcRetcodeSleep $ olcDDSmaxDynamicObjects $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
    51cbea35 1.3.6.1.4.1.1466.109.114.2 (caseIgnoreIA5Match): 51cbea35 matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.2 NAME ‘caseIgnoreIA5Match’ APPLIES ( altServer $ olcDbConfig $ c $ mail $ dc $ associatedDomain $ email $ aRecord $ mDRecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $ janetMailbox $ gecos $ homeDirectory $ loginShell $ memberUid $ memberNisNetgroup $ ipHostNumber $ ipNetworkNumber $ ipNetmaskNumber $ macAddress $ bootFile $ nisMapEntry ) )
    51cbea35 1.3.6.1.4.1.1466.109.114.1 (caseExactIA5Match): 51cbea35 matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.1 NAME ‘caseExactIA5Match’ APPLIES ( altServer $ olcDbConfig $ c $ mail $ dc $ associatedDomain $ email $ aRecord $ mDRecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $ janetMailbox $ gecos $ homeDirectory $ loginShell $ memberUid $ memberNisNetgroup $ ipHostNumber $ ipNetworkNumber $ ipNetmaskNumber $ macAddress $ bootFile $ nisMapEntry ) )
    51cbea35 2.5.13.39 (certificateListMatch): 51cbea35 2.5.13.38 (certificateListExactMatch): 51cbea35 matchingRuleUse: ( 2.5.13.38 NAME ‘certificateListExactMatch’ APPLIES ( authorityRevocationList $ certificateRevocationList $ deltaRevocationList ) )
    51cbea35 2.5.13.35 (certificateMatch): 51cbea35 2.5.13.34 (certificateExactMatch): 51cbea35 matchingRuleUse: ( 2.5.13.34 NAME ‘certificateExactMatch’ APPLIES ( userCertificate $ cACertificate ) )
    51cbea35 2.5.13.30 (objectIdentifierFirstComponentMatch): 51cbea35 matchingRuleUse: ( 2.5.13.30 NAME ‘objectIdentifierFirstComponentMatch’ APPLIES ( supportedControl $ supportedExtension $ supportedFeatures $ ldapSyntaxes $ supportedApplicationContext ) )
    51cbea35 2.5.13.29 (integerFirstComponentMatch): 51cbea35 matchingRuleUse: ( 2.5.13.29 NAME ‘integerFirstComponentMatch’ APPLIES ( supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $ olcListenerThreads $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ olcChainMaxReferralDepth $ olcDbMaxReaders $ olcDbMaxSize $ olcSpSessionlog $ olcSssVlvMax $ olcSssVlvMaxKeys $ olcSssVlvMaxPerConn $ olcPcacheMaxQueries $ olcRetcodeSleep $ olcDDSmaxDynamicObjects $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
    51cbea35 2.5.13.28 (generalizedTimeOrderingMatch): 51cbea35 matchingRuleUse: ( 2.5.13.28 NAME ‘generalizedTimeOrderingMatch’ APPLIES ( createTimestamp $ modifyTimestamp $ pwdChangedTime $ pwdAccountLockedTime $ pwdFailureTime $ pwdGraceUseTime ) )
    51cbea35 2.5.13.27 (generalizedTimeMatch): 51cbea35 matchingRuleUse: ( 2.5.13.27 NAME ‘generalizedTimeMatch’ APPLIES ( createTimestamp $ modifyTimestamp $ pwdChangedTime $ pwdAccountLockedTime $ pwdFailureTime $ pwdGraceUseTime ) )
    51cbea35 2.5.13.24 (protocolInformationMatch): 51cbea35 matchingRuleUse: ( 2.5.13.24 NAME ‘protocolInformationMatch’ APPLIES protocolInformation )
    51cbea35 2.5.13.23 (uniqueMemberMatch): 51cbea35 matchingRuleUse: ( 2.5.13.23 NAME ‘uniqueMemberMatch’ APPLIES uniqueMember )
    51cbea35 2.5.13.22 (presentationAddressMatch): 51cbea35 matchingRuleUse: ( 2.5.13.22 NAME ‘presentationAddressMatch’ APPLIES presentationAddress )
    51cbea35 2.5.13.20 (telephoneNumberMatch): 51cbea35 matchingRuleUse: ( 2.5.13.20 NAME ‘telephoneNumberMatch’ APPLIES ( telephoneNumber $ homePhone $ mobile $ pager ) )
    51cbea35 2.5.13.18 (octetStringOrderingMatch): 51cbea35 matchingRuleUse: ( 2.5.13.18 NAME ‘octetStringOrderingMatch’ APPLIES ( userPassword $ olcDbCryptKey $ pwdHistory ) )
    51cbea35 2.5.13.17 (octetStringMatch): 51cbea35 matchingRuleUse: ( 2.5.13.17 NAME ‘octetStringMatch’ APPLIES ( userPassword $ olcDbCryptKey $ pwdHistory ) )
    51cbea35 2.5.13.16 (bitStringMatch): 51cbea35 matchingRuleUse: ( 2.5.13.16 NAME ‘bitStringMatch’ APPLIES x500UniqueIdentifier )
    51cbea35 2.5.13.15 (integerOrderingMatch): 51cbea35 matchingRuleUse: ( 2.5.13.15 NAME ‘integerOrderingMatch’ APPLIES ( supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $ olcListenerThreads $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ olcChainMaxReferralDepth $ olcDbMaxReaders $ olcDbMaxSize $ olcSpSessionlog $ olcSssVlvMax $ olcSssVlvMaxKeys $ olcSssVlvMaxPerConn $ olcPcacheMaxQueries $ olcRetcodeSleep $ olcDDSmaxDynamicObjects $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
    51cbea35 2.5.13.14 (integerMatch): 51cbea35 matchingRuleUse: ( 2.5.13.14 NAME ‘integerMatch’ APPLIES ( supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $ olcListenerThreads $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ olcChainMaxReferralDepth $ olcDbMaxReaders $ olcDbMaxSize $ olcSpSessionlog $ olcSssVlvMax $ olcSssVlvMaxKeys $ olcSssVlvMaxPerConn $ olcPcacheMaxQueries $ olcRetcodeSleep $ olcDDSmaxDynamicObjects $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
    51cbea35 2.5.13.13 (booleanMatch): 51cbea35 matchingRuleUse: ( 2.5.13.13 NAME ‘booleanMatch’ APPLIES ( hasSubordinates $ olcAddContentAcl $ olcGentleHUP $ olcHidden $ olcLastMod $ olcMirrorMode $ olcMonitoring $ olcReadOnly $ olcReverseLookup $ olcSyncUseSubentry $ olcDbChecksum $ olcDbNoSync $ olcDbDirtyRead $ olcDbLinearIndex $ olcDbRebindAsUser $ olcDbChaseReferrals $ olcDbProxyWhoAmI $ olcDbSingleConn $ olcDbUseTemporaryConn $ olcDbSessionTrackingRequest $ olcDbNoRefs $ olcDbNoUndefFilter $ olcChainCacheURI $ olcChainReturnError $ olcDbPseudoRootBindDefer $ olcSpNoPresent $ olcSpReloadHint $ olcRwmNormalizeMapped $ olcRwmDropUnrequested $ olcPcachePersist $ olcPcacheValidate $ olcPcacheOffline $ olcRetcodeInDir $ olcTranslucentStrict $ olcTranslucentNoGlue $ olcTranslucentBindLocal $ olcTranslucentPwModLocal $ olcMemberOfRefInt $ olcDDSstate $ olcAccessLogSuccess $ pwdReset $ olcPPolicyHashCleartext $ olcPPolicyForwardUpdates $ olcPPolicyUseLockout $ olcUniqueStrict ) )
    51cbea35 2.5.13.11 (caseIgnoreListMatch): 51cbea35 matchingRuleUse: ( 2.5.13.11 NAME ‘caseIgnoreListMatch’ APPLIES ( postalAddress $ registeredAddress $ homePostalAddress ) )
    51cbea35 2.5.13.9 (numericStringOrderingMatch): 51cbea35 matchingRuleUse: ( 2.5.13.9 NAME ‘numericStringOrderingMatch’ APPLIES ( x121Address $ internationaliSDNNumber ) )
    51cbea35 2.5.13.8 (numericStringMatch): 51cbea35 matchingRuleUse: ( 2.5.13.8 NAME ‘numericStringMatch’ APPLIES ( x121Address $ internationaliSDNNumber ) )
    51cbea35 2.5.13.7 (caseExactSubstringsMatch): 51cbea35 matchingRuleUse: ( 2.5.13.7 NAME ‘caseExactSubstringsMatch’ APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) )
    51cbea35 2.5.13.6 (caseExactOrderingMatch): 51cbea35 matchingRuleUse: ( 2.5.13.6 NAME ‘caseExactOrderingMatch’ APPLIES ( supportedSASLMechanisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ description $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDitContentRules $ olcExtraAttrs $ olcInclude $ olcLdapSyntaxes $ olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ olcObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $ olcRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm $ olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimit $ olcSortVals $ olcSubordinate $ olcSyncrepl $ olcTCPBuffer $ olcTimeLimit $ olcTLSCACertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $ olcDbDirectory $ olcDbCheckpoint $ olcDbCryptFile $ olcDbPageSize $ olcDbIndex $ olcDbLockDetect $ olcDbMode $ olcDbURI $ olcDbStartTLS $ olcDbACLPasswd $ olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAssertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbIdleTimeout $ olcDbConnTtl $ olcDbNetworkTimeout $ olcDbCancel $ olcDbQuarantine $ olcDbOnErr $ olcDbIDAssertPassThru $ olcDbKeepalive $ olcChainingBehavior $ olcDbRewrite $ olcDbMap $ olcDbSubtreeExclude $ olcDbSubtreeInclude $ olcDbDefaultTarget $ olcDbDnCacheTtl $ olcDbBindTimeout $ olcDbNretries $ olcDbClientPr $ olcMetaSub $ olcDbEnvFlags $ olcSpCheckpoint $ olcRwmRewrite $ olcRwmTFSupport $ olcRwmMap $ olcPcache $ olcPcacheAttrset $ olcPcacheTemplate $ olcPcachePosition $ olcPcacheBind $ olcRetcodeItem $ olcTranslucentLocal $ olcTranslucentRemote $ olcMemberOfDangling $ olcMemberOfGroupOC $ olcMemberOfMemberAD $ olcMemberOfMemberOfAD $ olcMemberOfDanglingError $ olcDlAttrSet $ olcConstraintAttribute $ olcDDSmaxTtl $ olcDDSminTtl $ olcDDSdefaultTtl $ olcDDSinterval $ olcDDStolerance $ olcAccessLogOps $ olcAccessLogPurge $ olcAccessLogOld $ olcAccessLogOldAttr $ olcAccessLogBase $ olcAuditlogFile $ olcRefintAttribute $ olcUniqueIgnore $ olcUniqueAttribute $ olcUniqueURI $ olcValSortAttr $ knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ title $ businessCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pseudonym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $ host $ documentIdentifier $ documentTitle $ documentVersion $ documentLocation $ personalTitle $ co $ uniqueIdentifier $ organizationalStatus $ buildingName $ documentPublisher $ ipServiceProtocol $ nisMapName $ carLicense $ departmentNumber $ displayName $ employeeNumber $ employeeType $ preferredLanguage ) )
    51cbea35 2.5.13.5 (caseExactMatch): 51cbea35 matchingRuleUse: ( 2.5.13.5 NAME ‘caseExactMatch’ APPLIES ( supportedSASLMechanisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ description $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDitContentRules $ olcExtraAttrs $ olcInclude $ olcLdapSyntaxes $ olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ olcObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $ olcRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm $ olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimit $ olcSortVals $ olcSubordinate $ olcSyncrepl $ olcTCPBuffer $ olcTimeLimit $ olcTLSCACertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $ olcDbDirectory $ olcDbCheckpoint $ olcDbCryptFile $ olcDbPageSize $ olcDbIndex $ olcDbLockDetect $ olcDbMode $ olcDbURI $ olcDbStartTLS $ olcDbACLPasswd $ olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAssertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbIdleTimeout $ olcDbConnTtl $ olcDbNetworkTimeout $ olcDbCancel $ olcDbQuarantine $ olcDbOnErr $ olcDbIDAssertPassThru $ olcDbKeepalive $ olcChainingBehavior $ olcDbRewrite $ olcDbMap $ olcDbSubtreeExclude $ olcDbSubtreeInclude $ olcDbDefaultTarget $ olcDbDnCacheTtl $ olcDbBindTimeout $ olcDbNretries $ olcDbClientPr $ olcMetaSub $ olcDbEnvFlags $ olcSpCheckpoint $ olcRwmRewrite $ olcRwmTFSupport $ olcRwmMap $ olcPcache $ olcPcacheAttrset $ olcPcacheTemplate $ olcPcachePosition $ olcPcacheBind $ olcRetcodeItem $ olcTranslucentLocal $ olcTranslucentRemote $ olcMemberOfDangling $ olcMemberOfGroupOC $ olcMemberOfMemberAD $ olcMemberOfMemberOfAD $ olcMemberOfDanglingError $ olcDlAttrSet $ olcConstraintAttribute $ olcDDSmaxTtl $ olcDDSminTtl $ olcDDSdefaultTtl $ olcDDSinterval $ olcDDStolerance $ olcAccessLogOps $ olcAccessLogPurge $ olcAccessLogOld $ olcAccessLogOldAttr $ olcAccessLogBase $ olcAuditlogFile $ olcRefintAttribute $ olcUniqueIgnore $ olcUniqueAttribute $ olcUniqueURI $ olcValSortAttr $ knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ title $ businessCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pseudonym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $ host $ documentIdentifier $ documentTitle $ documentVersion $ documentLocation $ personalTitle $ co $ uniqueIdentifier $ organizationalStatus $ buildingName $ documentPublisher $ ipServiceProtocol $ nisMapName $ carLicense $ departmentNumber $ displayName $ employeeNumber $ employeeType $ preferredLanguage ) )
    51cbea35 2.5.13.4 (caseIgnoreSubstringsMatch): 51cbea35 matchingRuleUse: ( 2.5.13.4 NAME ‘caseIgnoreSubstringsMatch’ APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) )
    51cbea35 2.5.13.3 (caseIgnoreOrderingMatch): 51cbea35 matchingRuleUse: ( 2.5.13.3 NAME ‘caseIgnoreOrderingMatch’ APPLIES ( supportedSASLMechanisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ description $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDitContentRules $ olcExtraAttrs $ olcInclude $ olcLdapSyntaxes $ olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ olcObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $ olcRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm $ olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimit $ olcSortVals $ olcSubordinate $ olcSyncrepl $ olcTCPBuffer $ olcTimeLimit $ olcTLSCACertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $ olcDbDirectory $ olcDbCheckpoint $ olcDbCryptFile $ olcDbPageSize $ olcDbIndex $ olcDbLockDetect $ olcDbMode $ olcDbURI $ olcDbStartTLS $ olcDbACLPasswd $ olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAssertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbIdleTimeout $ olcDbConnTtl $ olcDbNetworkTimeout $ olcDbCancel $ olcDbQuarantine $ olcDbOnErr $ olcDbIDAssertPassThru $ olcDbKeepalive $ olcChainingBehavior $ olcDbRewrite $ olcDbMap $ olcDbSubtreeExclude $ olcDbSubtreeInclude $ olcDbDefaultTarget $ olcDbDnCacheTtl $ olcDbBindTimeout $ olcDbNretries $ olcDbClientPr $ olcMetaSub $ olcDbEnvFlags $ olcSpCheckpoint $ olcRwmRewrite $ olcRwmTFSupport $ olcRwmMap $ olcPcache $ olcPcacheAttrset $ olcPcacheTemplate $ olcPcachePosition $ olcPcacheBind $ olcRetcodeItem $ olcTranslucentLocal $ olcTranslucentRemote $ olcMemberOfDangling $ olcMemberOfGroupOC $ olcMemberOfMemberAD $ olcMemberOfMemberOfAD $ olcMemberOfDanglingError $ olcDlAttrSet $ olcConstraintAttribute $ olcDDSmaxTtl $ olcDDSminTtl $ olcDDSdefaultTtl $ olcDDSinterval $ olcDDStolerance $ olcAccessLogOps $ olcAccessLogPurge $ olcAccessLogOld $ olcAccessLogOldAttr $ olcAccessLogBase $ olcAuditlogFile $ olcRefintAttribute $ olcUniqueIgnore $ olcUniqueAttribute $ olcUniqueURI $ olcValSortAttr $ knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ title $ businessCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pseudonym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $ host $ documentIdentifier $ documentTitle $ documentVersion $ documentLocation $ personalTitle $ co $ uniqueIdentifier $ organizationalStatus $ buildingName $ documentPublisher $ ipServiceProtocol $ nisMapName $ carLicense $ departmentNumber $ displayName $ employeeNumber $ employeeType $ preferredLanguage ) )
    51cbea35 2.5.13.2 (caseIgnoreMatch): 51cbea35 matchingRuleUse: ( 2.5.13.2 NAME ‘caseIgnoreMatch’ APPLIES ( supportedSASLMechanisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ description $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDitContentRules $ olcExtraAttrs $ olcInclude $ olcLdapSyntaxes $ olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ olcObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $ olcRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm $ olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimit $ olcSortVals $ olcSubordinate $ olcSyncrepl $ olcTCPBuffer $ olcTimeLimit $ olcTLSCACertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $ olcDbDirectory $ olcDbCheckpoint $ olcDbCryptFile $ olcDbPageSize $ olcDbIndex $ olcDbLockDetect $ olcDbMode $ olcDbURI $ olcDbStartTLS $ olcDbACLPasswd $ olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAssertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbIdleTimeout $ olcDbConnTtl $ olcDbNetworkTimeout $ olcDbCancel $ olcDbQuarantine $ olcDbOnErr $ olcDbIDAssertPassThru $ olcDbKeepalive $ olcChainingBehavior $ olcDbRewrite $ olcDbMap $ olcDbSubtreeExclude $ olcDbSubtreeInclude $ olcDbDefaultTarget $ olcDbDnCacheTtl $ olcDbBindTimeout $ olcDbNretries $ olcDbClientPr $ olcMetaSub $ olcDbEnvFlags $ olcSpCheckpoint $ olcRwmRewrite $ olcRwmTFSupport $ olcRwmMap $ olcPcache $ olcPcacheAttrset $ olcPcacheTemplate $ olcPcachePosition $ olcPcacheBind $ olcRetcodeItem $ olcTranslucentLocal $ olcTranslucentRemote $ olcMemberOfDangling $ olcMemberOfGroupOC $ olcMemberOfMemberAD $ olcMemberOfMemberOfAD $ olcMemberOfDanglingError $ olcDlAttrSet $ olcConstraintAttribute $ olcDDSmaxTtl $ olcDDSminTtl $ olcDDSdefaultTtl $ olcDDSinterval $ olcDDStolerance $ olcAccessLogOps $ olcAccessLogPurge $ olcAccessLogOld $ olcAccessLogOldAttr $ olcAccessLogBase $ olcAuditlogFile $ olcRefintAttribute $ olcUniqueIgnore $ olcUniqueAttribute $ olcUniqueURI $ olcValSortAttr $ knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ title $ businessCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pseudonym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $ host $ documentIdentifier $ documentTitle $ documentVersion $ documentLocation $ personalTitle $ co $ uniqueIdentifier $ organizationalStatus $ buildingName $ documentPublisher $ ipServiceProtocol $ nisMapName $ carLicense $ departmentNumber $ displayName $ employeeNumber $ employeeType $ preferredLanguage ) )
    51cbea35 1.2.36.79672281.1.13.3 (rdnMatch): 51cbea35 2.5.13.1 (distinguishedNameMatch): 51cbea35 matchingRuleUse: ( 2.5.13.1 NAME ‘distinguishedNameMatch’ APPLIES ( creatorsName $ modifiersName $ subschemaSubentry $ entryDN $ namingContexts $ aliasedObjectName $ dynamicSubtrees $ distinguishedName $ seeAlso $ olcDefaultSearchBase $ olcRootDN $ olcSchemaDN $ olcSuffix $ olcUpdateDN $ olcRelay $ olcDbACLAuthcDn $ olcDbIDAssertAuthcDn $ olcRetcodeParent $ memberOf $ olcMemberOfDN $ olcAccessLogDB $ pwdPolicySubentry $ olcPPolicyDefault $ olcRefintNothing $ olcRefintModifiersName $ olcUniqueBase $ member $ owner $ roleOccupant $ manager $ documentAuthor $ secretary $ associatedName $ dITRedirect ) )
    51cbea35 2.5.13.0 (objectIdentifierMatch): 51cbea35 matchingRuleUse: ( 2.5.13.0 NAME ‘objectIdentifierMatch’ APPLIES ( supportedControl $ supportedExtension $ supportedFeatures $ supportedApplicationContext ) )
    51cbea35 slapd startup: initiated.
    51cbea35 backend_startup_one: starting “cn=config”
    51cbea35 config_back_db_open
    51cbea35 config_build_entry: “cn=config”
    51cbea35 config_build_attrs: error 21 on olcConfigFile value #0
    51cbea35 config_build_entry: build “cn=config” failed: “”
    51cbea35 backend_startup_one (type=config, suffix=”cn=config”): bi_db_open failed! (-1)
    51cbea35 slapd shutdown: initiated
    51cbea35 ====> bdb_cache_release_all
    51cbea35 slapd destroy: freeing system resources.
    51cbea35 slapd stopped.

    启动时候报以上错误,好像是数据库错误,能否分析一下。
    –xp版本
    –OpenLDAP是 2.4.34

  16. 请问博主,你这个版本的可以include自定义的schema吗?我在slapd.conf里面将我的schema文件include以后启动openldap看到并没有引入我的schema

  17. 另外,楼主,我想问一下,就是本地启动的项目,如:localhost:8080/testProject这样的访问路径应该如何配置suffix和rootdn?

  18. 楼主好,按照配置说明,我在win2008上面安装的,但是在执行slapd -d 1的时候,提示如下错误,麻烦帮忙看看呗,在网上查了好久也没有找到
    516e6056 slapd startup: initiated.
    516e6056 backend_startup_one: starting “cn=config”
    516e6056 config_back_db_open
    516e6056 config_build_entry: “cn=config”
    516e6056 config_build_attrs: error 21 on olcConfigFile value #0
    516e6056 config_build_entry: build “cn=config” failed: “”
    516e6056 backend_startup_one (type=config, suffix=”cn=config”): bi_db_open failed! (-1)
    516e6056 slapd shutdown: initiated
    516e6056 ====> bdb_cache_release_all
    516e6056 slapd destroy: freeing system resources.
    516e6056 slapd stopped.

    • 估计是你的conf 配置文件有问题

      • conf我只改动了suffix、rootdn、rootpw三个地方,其他都是安装时默认的设置,文件内容如下:
        # BDB Backend configuration file
        # See slapd.conf(5) for details on configuration options.
        # This file should NOT be world readable.
        ucdata-path ./ucdata
        include ./schema/core.schema
        include ./schema/cosine.schema
        include ./schema/nis.schema
        include ./schema/inetorgperson.schema
        include ./schema/openldap.schema
        include ./schema/dyngroup.schema

        pidfile ./run/slapd.pid
        argsfile ./run/slapd.args

        # Enable TLS if port is defined for ldaps

        TLSVerifyClient never
        TLSCipherSuite HIGH:MEDIUM:-SSLv2
        TLSCertificateFile ./secure/certs/server.pem
        TLSCertificateKeyFile ./secure/certs/server.pem
        TLSCACertificateFile ./secure/certs/server.pem

        #######################################################################
        # bdb database definitions
        #######################################################################

        database bdb
        suffix “dc=micmiu,dc=com”
        rootdn “cn=Manager,dc=micmiu,dc=com”

        # Cleartext passwords, especially for the rootdn, should
        # be avoid. See slappasswd(8) and slapd.conf(5) for details.
        # Use of strong authentication encouraged.
        rootpw {MD5}xMpCOKC5I4INzFCab3WEmw==

        # The database directory MUST exist prior to running slapd AND
        # should only be accessible by the slapd and slap tools.
        # Mode 700 recommended.
        directory ./data
        dirtyread
        searchstack 20
        # Indices to maintain
        index mail pres,eq
        index objectclass pres
        index default eq,sub
        index sn eq,sub,subinitial
        index telephonenumber
        index cn

      • 使用 slapd -d 1 -f demo.conf . 运行,应该就可以了

    • 请问是怎么解决的?我换了个win7,还是同样的错误。需要配置什么环境变量吗?

      • 我从以下网址找到了这样一句话:http://www.zytrax.com/books/ldap/ch6/slapd-config.html#convert
        You can configure OLC (cn=config) to an unusable state. We changed the rootdn of cn=config via an LDAP browser from cn=config to cn=admin (an invalid change since all config elements must end with a root of cn=config). The change was however accepted. The connection was immediately broken (correctly) but we could not bind under any value – old or new. We stopped and tried to start slapd which also failed because it refused to load under our newly modified rootdn (cn=admin). The only solution was to edit slapd.d/cn=config/olcDatabase={0}config.ldif and restore the olcRootDn attribute to cn=config. We then loaded slapd, changed the olcRootDn attribute via an LDAP browser to cn=admin,cn=config and everything worked perfectly.
        但是我们这个版本貌似没有slapd.d这样东西

  19. 安装好之后服务起不来。 错误代码1053. windows xp环境。
    网上找了半天没找到答案。 求楼主解释。

  20. 日志信息:slapd starting 表示服务已经启动好了??
    我在cmd中看到的信息和你的是类似的。但是,实际服务还是没有启动。这个是什么问题啊?

  21. 楼主你好:
    关于windowsAD 与openLdap同步怎么做啊?有没有一些资料或链接让我参考一下啊?最近急用

  22. 有没有人和我一样。。。把l 当成 一的。。。。

  23. 大神。。。。我也在学习lDAP 按照你的说的测试到创建mydemo的时候有问题。。。command里面说illegal option什么的。。。是为什么呢??还有就是如何停止slapd啊??我用的windows的没有orcle 所以一直用slapadd这个

  24. 您好,我执行slapadd -v -l ./example.ldif卡哪不动手什么原因?

  25. 如果要備份的話是COPY整個資料夾就可以了嗎?

  26. 加个QQ吧 我的是47517680

  27. 那真有才能让ldapadd好用呢,总不至于安个oracle吧! :mrgreen:

  28. 非常感谢你的文章。请问一下:slapadd -v -l ./mydemo.ldif
    命令是提示Available database(s) do not allow slapadd是什么原因?slapd 服务是关掉的

  29. 楼主非常正确,虽然在弄的过程中走了点弯路,但是最后还是弄好了,谢谢分享。不知道能不能详解一下编译命令-d -v -l等和 sn o cn 等属性是什么意思不胜感谢!!! :razz:

  30. 楼主您好!
    当我用命令“slapadd”代替导入数据文件时候 出现slapadd:illegal option–1 这是为什么?

  31. 按此步骤能够顺利的跑起来,我的是win7 32位的,之前在百度没搜到这篇文章,折腾了好久,还是朋友告诉我的,谢谢!

  32. 楼主还有问题,不知道是环境的影响。

    C:\Pargram Files (x86)\OpenLDAP\slapadd -v -l ./mydemo.ldif
    cound not stat config file %SYSCONFDIR%\slapd.conf”: No such file or directroy (2)
    slapadd: bad configuration file

  33. 我的环境和文章里一样,运行到ldapadd时就报错。

  34. 楼主好,按照你的执行下来,试了几次,一直报下面错误: ‘ldapadd’ 不是内部或外部命令,也不是可运行的程序或批处理文件。为什么?

发表评论


注意 - 你可以用以下 HTML tags and attributes:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code class="" title="" data-url=""> <del datetime=""> <em> <i> <q cite=""> <strike> <strong> <pre class="" title="" data-url=""> <span class="" title="" data-url="">