822420e2d3
Package openldap-config is added to config customized config file
of openldap.
Here is the customized change in slapd.service:
"
-After=syslog.target network-online.target
+Before=rsyncd.service
+After=network.target syslog-ng.target
-PIDFile=/var/run/openldap/slapd.pid
+PIDFile=/var/run/slapd.pid
-ExecStart=/usr/sbin/slapd -u ldap -h ${SLAPD_URLS} $SLAPD_OPTIONS
+ExecStart=/etc/init.d/openldap start
+ExecStop=/etc/init.d/openldap stop
+ExecReload=/etc/init.d/openldap restart
+RemainAfterExit=yes
"
Here is the customized change in slapd.sysconfig:
"
-#SLAPD_OPTIONS=""
+SLAPD_OPTIONS=""
"
Test:
Pass build and multi node deploy test. Confirmed related config
file is the same as before in deploy node.
Story: 2003768
Task: 26462
Depends-On: https://review.openstack.org/618440
Change-Id: I2559a8e43619449d6179ed913181052d653fa91d
Signed-off-by: slin14 <shuicheng.lin@intel.com>
81 lines
1.7 KiB
Plaintext
81 lines
1.7 KiB
Plaintext
#ldapadd -D "cn=ldapadmin,dc=cgcs,dc=local" -W -f /etc/openldap/initial_config.ldif
|
|
#ldapsearch -x -b 'dc=cgcs,dc=local' '(objectclass=*)'
|
|
dn: dc=cgcs,dc=local
|
|
dc: cgcs
|
|
objectClass: top
|
|
objectClass: domain
|
|
|
|
dn: ou=policies,dc=cgcs,dc=local
|
|
ou: policies
|
|
objectClass: top
|
|
objectClass: organizationalUnit
|
|
|
|
dn: ou=People,dc=cgcs,dc=local
|
|
ou: People
|
|
objectClass: top
|
|
objectClass: organizationalUnit
|
|
|
|
dn: ou=Group,dc=cgcs,dc=local
|
|
ou: Group
|
|
objectClass: top
|
|
objectClass: organizationalUnit
|
|
|
|
dn: ou=SUDOers,dc=cgcs,dc=local
|
|
objectClass: top
|
|
objectClass: organizationalUnit
|
|
ou: SUDOers
|
|
|
|
dn: cn=users,ou=Group,dc=cgcs,dc=local
|
|
objectClass: posixGroup
|
|
objectClass: top
|
|
cn: users
|
|
userPassword: {crypt}x
|
|
gidNumber: 100
|
|
|
|
dn: cn=cgcs,ou=Group,dc=cgcs,dc=local
|
|
objectClass: posixGroup
|
|
objectClass: top
|
|
cn: cgcs
|
|
userPassword: {crypt}x
|
|
gidNumber: 1000
|
|
|
|
dn: cn=default,ou=policies,dc=cgcs,dc=local
|
|
objectClass: top
|
|
objectClass: device
|
|
objectClass: pwdPolicy
|
|
objectClass: pwdPolicyChecker
|
|
cn: default
|
|
pwdAttribute: userPassword
|
|
pwdMaxAge: 0
|
|
pwdExpireWarning: 432000
|
|
pwdInHistory: 2
|
|
pwdCheckModule: check_password.so
|
|
pwdCheckQuality: 1
|
|
pwdMinLength: 7
|
|
pwdMaxFailure: 5
|
|
pwdLockout: TRUE
|
|
pwdLockoutDuration: 300
|
|
pwdFailureCountInterval: 0
|
|
pwdMustChange: TRUE
|
|
pwdAllowUserChange: TRUE
|
|
pwdSafeModify: FALSE
|
|
pwdGraceAuthNLimit: 0
|
|
|
|
dn: cn=defaults,ou=SUDOers,dc=cgcs,dc=local
|
|
objectClass: top
|
|
objectClass: sudoRole
|
|
cn: defaults
|
|
description: Default sudoOption's go here
|
|
sudoOrder: 1
|
|
|
|
dn: cn=admin,ou=SUDOers,dc=cgcs,dc=local
|
|
objectClass: top
|
|
objectClass: sudoRole
|
|
cn: admin
|
|
sudoUser: admin
|
|
sudoHost: ALL
|
|
sudoRunAsUser: ALL
|
|
sudoCommand: ALL
|
|
sudoOrder: 2
|
|
sudoOption: secure_path=/usr/local/bin:/usr/bin:/bin:/usr/local/sbin:/usr/sbin:/sbin
|