directory-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From elecha...@apache.org
Subject [22/50] git commit: update README.txt procedures for using existing OpenLDAP server.
Date Mon, 20 Oct 2014 23:06:39 GMT
update README.txt procedures for using existing OpenLDAP server.


Project: http://git-wip-us.apache.org/repos/asf/directory-fortress-core/repo
Commit: http://git-wip-us.apache.org/repos/asf/directory-fortress-core/commit/cb05c0bc
Tree: http://git-wip-us.apache.org/repos/asf/directory-fortress-core/tree/cb05c0bc
Diff: http://git-wip-us.apache.org/repos/asf/directory-fortress-core/diff/cb05c0bc

Branch: refs/heads/master
Commit: cb05c0bc18f0c4bad633d559efa79d97ac1fe6f1
Parents: 12392c9
Author: Shawn McKinney <shawn.mckinney@jts.us>
Authored: Thu Jul 3 08:16:53 2014 -0500
Committer: Shawn McKinney <shawn.mckinney@jts.us>
Committed: Thu Jul 3 08:16:53 2014 -0500

----------------------------------------------------------------------
 README.txt                                      | 84 ++++++++++++++------
 build.properties                                | 12 +--
 .../java/org/openldap/fortress/overview.html    |  2 +-
 3 files changed, 66 insertions(+), 32 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/directory-fortress-core/blob/cb05c0bc/README.txt
----------------------------------------------------------------------
diff --git a/README.txt b/README.txt
index 40a62d1..5d12a4a 100755
--- a/README.txt
+++ b/README.txt
@@ -15,7 +15,7 @@ ________________________________________________________________________________
 ###################################################################################
 README for Fortress Identity and Access Management SDK
 Version 1.0-RC37
-last updated: June 25, 2014
+last updated: July 3, 2014
 
 This document provides instructions to download, compile, test and use the
 Fortress IAM with OpenLDAP server.  If you don't already have OpenLDAP installed,
@@ -227,37 +227,71 @@ a. Install OpenLDAP using your existing package management system.
 
         + etc.
 
-- No need to configure or load the OpenLDAP server.  That is handled on step c below.
+b. Copy fortress schema to openldap schema folder:
 
+cp FORTRESS_HOME/ldap/schema/fortress.schema $OPENLDAP_HOME/etc/openldap/schema
 
-b. enable the correct installation particulars into FORTRESS_HOME/openldap-fortress-core/build.properties.
+c. Enable Fortress schema in slapd.conf:
 
-    These parameters will need to vary according to how your OpenLDAP system was installed.
For Debian OpenLDAP builds,
-    use the following:
+include		FORTRESS_HOME/etc/openldap/schema/fortress.schema
 
-## If using Debian/Ubuntu OpenLDAP, uncomment this section:
-db.dir=/var/lib/ldap
-db.hist.dir=${db.dir}/hist
-db.bak.dir=/var/lib/ldap-backup/db
-db.bak.hist.dir=/var/lib/ldap-backup/hist
-slapd.dir=/etc/ldap
-pid.dir=/var/run/slapd
-slapd.module.dir=/usr/lib/ldap
-slapd.start=slapd -f /etc/ldap/slapd.conf
- unless you know what you're doing, take the default:
-log.dbnosynch=dbnosync
-dflt.dbnosynch=dbnosync
-log.checkpoint=checkpoint	4056 60
-dflt.checkpoint=checkpoint	1024 60
+note: for steps b & c above substitute FORTRESS_HOME for root of your OpenLDAP installation.
 
-c. Run the install target:
+d. For password policy support, enable pwpolicy overlay in slapd.conf:
 
-if Debian sudo:
->sudo $ANT_HOME/bin/ant init-slapd
+moduleload	ppolicy.la
 
-if not sudo you must run as user that has priv to modify folders in /var and /opt folders:
->su
->$ANT_HOME/bin/ant init-slapd
+e. For Fortress audit support, enable slapoaccesslog in slapd.conf
+
+moduleload  accesslog.la
+
+f. Gather the following information about your OpenLDAP instance:
+
+i. suffix
+ii. host
+iii. port
+iv. ldap user account that has read/write priv for default DIT (root works)
+v. pw for above
+vi. ldap user account that has read/write priv for access log DIT (log root works)
+vii. pw for above
+
+
+g. Example OpenLDAP instance:
+
+i. dc=example, dc=com
+ii. myhostname
+iii. 389
+iv. "cn=Manager,dc=example,dc=com"
+v. secret
+vi. "cn=Manager,cn=log"
+vii. secret
+
+h. Modify the build.properties file with settings
+
+i.
+suffix.name=example
+suffix.dc=com
+
+ii. ldap.host=myhostname
+
+iii. ldap.port=389
+
+iv. root.dn=cn=Manager,${suffix}
+
+v. root.pw=secret
+note: the above may be hased using slappasswd
+
+vi. log.root.dn=cn=Manager,${log.suffix}
+
+vii. secret
+
+i. Create the Fortress DIT:
+
+from the FORTRESS_HOME root folder, enter the following:
+
+>$ANT_HOME/bin/ant load-slapd
+
+j. Proceed to SECTION 8 to regression test Fortress and OpenLDAP
 
 ___________________________________________________________________________________
 ###################################################################################

http://git-wip-us.apache.org/repos/asf/directory-fortress-core/blob/cb05c0bc/build.properties
----------------------------------------------------------------------
diff --git a/build.properties b/build.properties
index 438286e..967e463 100644
--- a/build.properties
+++ b/build.properties
@@ -316,11 +316,11 @@ db.bak.audit.dir=${db.root}/backup/rbacaudit
 ########################################################################
 
 # Use Fortress defined LDAP Group objectclass:
-#group.objectclass=configGroup
-#group.protocol=configProtocol
-#group.properties=configParameter
+group.objectclass=configGroup
+group.protocol=configProtocol
+group.properties=configParameter
 
 # Use Guacamole defined LDAP Group objectclass:
-group.objectclass=guacConfigGroup
-group.protocol=guacConfigProtocol
-group.properties=guacConfigParameter
\ No newline at end of file
+#group.objectclass=guacConfigGroup
+#group.protocol=guacConfigProtocol
+#group.properties=guacConfigParameter
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/directory-fortress-core/blob/cb05c0bc/src/main/java/org/openldap/fortress/overview.html
----------------------------------------------------------------------
diff --git a/src/main/java/org/openldap/fortress/overview.html b/src/main/java/org/openldap/fortress/overview.html
index 4536cad..703963e 100755
--- a/src/main/java/org/openldap/fortress/overview.html
+++ b/src/main/java/org/openldap/fortress/overview.html
@@ -39,7 +39,7 @@
       <h2>What technologies are used?</h2>
       <p>
          Fortress SDK runs on any platform that supports Java technology and LDAP v3 protocols.
 Functionality that extends beyond
-          LDAP v3 is provided via <a href="http://openldap.org/">OpenLDAP</a>
specific features.  In other words Fortress was optimized to run on OpenLDAP but will work
on any directory.
+          LDAP v3 is provided via <a href="http://openldap.org/">OpenLDAP</a>
specific features.  In other words Fortress was optimized to run on OpenLDAP but works on
any directory.
       </p>
        <hr>
       <h2>What are the conditions of use?</h2>


Mime
View raw message