一、使用 yum 安装 OpenLDAP 客户端和服务端组件

yum install -y openldap-clients
yum install -y openldap-servers
systemctl restart slapd
systemctl enable slapd

二、把 RootPW 修改成 123456

slappasswd -s 123456
{SSHA}fzq2aqwgbr+c04mknVsW/ww3s4Y+hyIw

ldapmodify -Q -Y EXTERNAL -H ldapi:/// <<EOF
dn: olcDatabase={2}hdb,cn=config
changetype: modify
add: olcRootPW
olcRootPW: {SSHA}fzq2aqwgbr+c04mknVsW/ww3s4Y+hyIw
EOF

三、把 RootDN 修改成 cn=admin,dc=wuweixin,dc=com

ldapmodify -Q -Y EXTERNAL -H ldapi:/// <<EOF
dn: olcDatabase={2}hdb,cn=config
changetype: modify
replace: olcRootDN
olcRootDN: cn=admin,dc=wuweixin,dc=com
EOF

四、把 Suffix 为 dc=wuweixin,dc=com

ldapmodify -Q -Y EXTERNAL -H ldapi:/// <<EOF
dn: olcDatabase={2}hdb,cn=config
changetype: modify
replace: olcSuffix
olcSuffix: dc=wuweixin,dc=com
EOF

五、设置 Suffix 的节点信息

ldapadd -Q -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/cosine.ldif

ldapadd -D "cn=admin,dc=wuweixin,dc=com" -W <<EOF
dn: dc=wuweixin,dc=com
objectClass: domain
dc: wuweixin
EOF

六、添加测试数据

ldapadd -D "cn=admin,dc=wuweixin,dc=com" -W <<EOF
dn: uid=user1,dc=wuweixin,dc=com
objectClass: top
objectClass: account
objectClass: simpleSecurityObject
uid: user1
userPassword: password1
EOF

ldapadd -D "cn=admin,dc=wuweixin,dc=com" -W <<EOF
dn: uid=user2,dc=wuweixin,dc=com
objectClass: top
objectClass: account
objectClass: simpleSecurityObject
uid: user2
userPassword: password2
EOF