OpenLDAP Server & Client Configuration in RHEL 7 | How To Setup OpenLDAP Authentication in Linux

Install & Configure Openldap Server & Client in Redhat Enterprise Linux 7:
================

Server Configuration:
1. Install the required LDAP Packages.

2. Create a LDAP root passwd for administration purpose
New password:
Re-enter new password:

3. Edit the OpenLDAP Server Configuration

4. Provide the Monitor privileges.

config file testing succeeded

5. Enable and Start the SLAPD service.

6. Configure the LDAP Database.

Add the following LDAP Schemas.

7. Create the self-signed certificate

Verify the created certificates under the location /etc/pki/tls/certs/

8. Create base objects in OpenLDAP.
$DEFAULT_BASE = "dc=nehraclasses,dc=com";
$EXTENDED_SCHEMA = 1;

10. Create Local Users.

11. Import Users in to the LDAP Database.

12. Test the configuration.

13. Stop Firewalld to allow the connection.

14. NFS Configuration to export the Home Directory.
/home *(rw,sync)

Enable and restart rpcbind and nfs service.

Test the NFS Configuration.

Client Configuration:
1. Ldap Client Configuration to use LDAP Server.

2. Start & Enable the services.
# systemctl start rpcbind
# systemctl start nfs
# systemctl enable rpcbind
# systemctl enable nfs

3. Mount the LDAP Users Home Directory.
# vim /etc exports
/home/ *(rw)
# showmount -e localhost

4. Configure LDAP Authentication.
# authconfig-tui

5. Mount the /home directory.
Make the entry in AutoFS.

6. Test the Client Configuration.
ldapuser1:x:1000:1000:ldapuser1:/home/ldapuser1:/bin/bash

7. Switch in the account of ldap user and create some files.
# su - ldapuser1
Now go to the Ldapserver, and verify the files for ldapuser1 in his home directory.
# cd /home/ldapuser1
# ls -lh
You have successfully configured the LDAP Server & LDAP Client in RHEL 7.

[omkarshukla]

Sir you are just like a Google in linux.
Jo kahi nai milta aapke pas se jaroor mil jata hai

[camilorestrepo]

Since authconfig-tui, is deprecated to the redhat 8, how can I configure it for the exam 8?

[SanjayVerma-srmg]

Hi sir. If possible kindly make a vedio regarding dynamic dns configuration in rhel 7/8. Bcos it's very difficult task for u human to assign manual name for linux client when u have 500 linux client

[srihari]

I got error while executing this command
LDAP_bind: invalid credentials (49)

[ranapratapsingh]

sir for confuring ldap server do we need to use same unix flavours os for ldap server and ldap client

[piusococh]

Hi i am wondering why i can start the slapd servce after editing the adding the RooTPW, olcTLSCertiicate and olcTLSCertificateFile to the configuration file I would be happy to hear back from you thanks.

[rahulanshan]

Is it possible to follow these steps inside a centos7 docker container ?

[tarunmittal]

how we can set up password caching, so we can use the LDAP for authentication even when the LDAP server is down or not reachable.

[piusococh]

Hi thanks for the video out i cant start the slapd service after adding the RooTPW, olcTLSCertiicate and olcTLSCertificateFile. How do you clear that error in your video. Thanks

[harshalsalunkhe]

Sir appne vo slaps.service start kasa ki same issue with me and I searched alot but not able to solve it plz help

[rajnishsaini]

sir ye command k baad jo password dena vo kon sa hh

[abhirambajpai]

Sir I followed these steps but LDAP not properly work

[xayal]

How to setup openLDAP Server with SSL certificate??

[sandipbanerjee]

Sir apne root/base.ldif file ke andar Jo copy kia hain wo kaha se Kia hain .

[shekars]

Hi sir,

It will great if you are prepare video configuring gui for openldap I.e. apache directory studio. Thanks in advance..

[srihari]

Hello sir can you please give me confirmation about this error
# Ledadd -x -W -D "cn=Manager, dc=xxx, dc=xxx -f /root/base.ldif

[abdularshad]

same error display when start the service kindly provide the solution you stop and skip the solution in video
Job for slapd.service failed because the control process exited with error code. See "systemctl status slapd.service" and "journalctl -xe" for details.