Commit 419da03b authored by Yuri Aksenov's avatar Yuri Aksenov

Added support for openldap daemon

parent 0fdfc775
......@@ -8,3 +8,67 @@ all:
$(MAKE) -C openldap-2.4.46
$(MAKE) -C openldap-2.4.46 install
rm -rf openldap-2.4.46
server: ldap-service
rm /etc/passwd
mv -v /data/etc/passwd /etc/passwd
rm /etc/group
mv -v /data/etc/group /etc/group
rm /etc/shadow
mv -v /data/etc/shadow /etc/shadow
rm /etc/gshadow
mv -v /data/etc/gshadow /etc/gshadow
groupadd -g 83 ldap
useradd -c "OpenLDAP Daemon Owner" -d /srv/www -g ldap -s /bin/false -u 83 ldap
rm /etc/passwd-
rm /etc/group-
rm /etc/shadow-
rm /etc/gshadow-
mv -v /etc/passwd /data/etc/passwd
ln -sv /data/etc/passwd /etc/passwd
mv -v /etc/group /data/etc/group
ln -sv /data/etc/group /etc/group
mv -v /etc/shadow /data/etc/shadow
ln -sv /data/etc/shadow /etc/shadow
mv -v /etc/gshadow /data/etc/gshadow
ln -sv /data/etc/gshadow /etc/gshadow
tar xf openldap-2.4.46.tgz
patch -Np1 -d openldap-2.4.46 < openldap-2.4.46-arm64.patch
patch -Np1 -d openldap-2.4.46 < openldap-2.4.46-consolidated-1.patch
cd openldap-2.4.46 && autoconf
cd openldap-2.4.46 && ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --libexecdir=/usr/lib --disable-static --enable-debug --with-tls=openssl --enable-dynamic --enable-crypt --enable-slapd --enable-modules --enable-rlookups --enable-backends=mod --disable-ndb --disable-sql --disable-shell --disable-bdb --disable-hdb --enable-overlays=mod
$(MAKE) -C openldap-2.4.46 depend
$(MAKE) -C openldap-2.4.46
$(MAKE) -C openldap-2.4.46 install
sed -e "s/\.la/.so/" -i /etc/openldap/slapd.{conf,ldif}{,.default}
install -v -dm700 -o ldap -g ldap /var/lib/openldap
install -v -dm700 -o ldap -g ldap /etc/openldap/slapd.d
chmod -v 640 /etc/openldap/slapd.{conf,ldif}
chown -v root:ldap /etc/openldap/slapd.{conf,ldif}
install -v -dm755 /usr/share/doc/openldap-2.4.46
cd openldap-2.4.46 && cp -vfr doc/{drafts,rfc,guide} /usr/share/doc/openldap-2.4.46
@echo "d /run/openldap 755 ldap ldap -" > /usr/lib/tmpfiles.d/slapd.conf
@echo "$$LDAP_SERVICE" > /lib/systemd/system/slapd.service
systemctl enable slapd
mkdir /var/run/openldap
chown -v ldap:ldap /var/run/openldap
rm -rf openldap-2.4.46
ldap-service:
define LDAP_SERVICE
[Unit]
Description = LDAP server
[Service]
; -d0 stops slapd from forking
ExecStart = /usr/sbin/slapd -u ldap -g ldap -h "ldap://127.0.0.1:389/ ldaps:/// ldapi:///"
Restart = always
RestartSec = 180
IOSchedulingClass = realtime
Nice = -10
[Install]
WantedBy = multi-user.target
endef
export LDAP_SERVICE
\ No newline at end of file
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment