Changes between Version 20 and Version 21 of Howto_Ldap

Timestamp:

Jan 14, 2011 6:08:30 PM (2 years ago)

Author:

andudi

Comment:

finally added

Howto_Ldap

@@ -10 +10 @@
 - the LDAP server is running on the same host as Roundcube
 - the static config file is used instead of the newer dynamic config directory
-- security issues are not part of this Howto, neverthelsess it is highly recomanded to disallow connections from other hosts to the concernig ldap port (389) with a firewall
+- security issues are not part of this Howto, neverthelsess it is highly recomanded to disallow connections from other hosts than needed with a firewall
 - this Howto is based and tested on '''Debian Lenny''' and '''Ubuntu 10.10''', but other Distros (and OS?) should do it as well
 If you do not agree with my propositions, help your self to improve your installation!
@@ -133 +133 @@
 $ sudo invoke-rc.d slapd restart
 }}}
-If you do not find any errors on the command line, your LDAP server is ready to become a LDAP addressbook server :-)
+If you do not find any errors here, your LDAP server is ready now to become a LDAP addressbook server :-)
+
 
 == Setup the LDAP Server ==
@@ -145 +146 @@
 If you get '''No such object (32)''' this means that the LDAP directory is still empty, else you can get all the preconfigured entries.
 
-Next we have to setup a directory structure such that Roundcube can operate on it. Use the following shell script (bash) as administrator on the server (sudo or as root):
-{{{
-
-}}}
+Next we have to setup a directory structure such that Roundcube can operate on it. Download the following shell script, configure the first few lines in it, and execute it as administrator on the server (sudo or as root): [[http://trac.roundcube.net/raw-attachment/wiki/Howto_Ldap/rcabook-setup.sh|rcabook-setup.sh]]
+
+You should get something like that:
+{{{
+$ sudo bash rcabook-setup.sh
+This script prepares an openLDAP server for a simple
+addressbook, working "out of the box" with Roundcube:
+
+  server: ldap://localhost:389
+  org   : Local LDAP Addressbook Server
+  config: /etc/ldap/slapd.conf
+  suffix: dc=localhost
+  rootdn: cn=admin,dc=localhost
+
+-create the openLDAP base directory: dc=localhost
+  (as LDAP administator: cn=admin,dc=localhost)
+  Enter LDAP Password: 
+adding new entry "dc=localhost"
+
+-create the addressbook user: cn=rcuser,dc=localhost
+  (as LDAP administator: cn=admin,dc=localhost)
+  Enter LDAP Password: 
+adding new entry "cn=rcuser,dc=localhost"
+
+-create addressbook base directory: ou=rcabook,dc=localhost
+  (as LDAP administator: cn=admin,dc=localhost)
+  Enter LDAP Password: 
+adding new entry "ou=rcabook,dc=localhost"
+
+-create subdirectory for contacts: ou=contacts,ou=rcabook,dc=localhost
+  (as Roundcube user: cn=rcuser,dc=localhost)
+adding new entry "ou=contacts,ou=rcabook,dc=localhost"
+
+-create subdirectory for groups: ou=groups,ou=rcabook,dc=localhost
+  (as Roundcube user: cn=rcuser,dc=localhost)
+adding new entry "ou=groups,ou=rcabook,dc=localhost"
+
+The LDAP addressbook is ready now for using:
+  base_dn: ou=rcabook,dc=localhost
+  bind_dn: cn=rcuser,dc=localhost
+  
+Use the following command for reading and checking your setup:
+  ldapsearch -xLLL -H ldap://localhost:389 -D cn=rcuser,dc=localhost -w rcpass -b dc=localhost
+}}}
+If you run the proposed ldap search query, you should get something like:
+{{{
+$ ldapsearch -xLLL -H ldap://localhost:389 -D cn=rcuser,dc=localhost -w rcpass -b dc=localhost
+dn: dc=localhost
+objectClass: top
+objectClass: dcObject
+objectClass: organization
+dc: localhost
+o: Local LDAP Addressbook Server
+
+dn: cn=rcuser,dc=localhost
+cn: rcuser
+userPassword:: e1NTSEF9TzZERjI2WXB1a1FKcS93V0NKWFJpL0FBY2hia3czdEk=
+objectClass: organizationalRole
+objectClass: simpleSecurityObject
+
+dn: ou=rcabook,dc=localhost
+ou: rcabook
+objectClass: top
+objectClass: organizationalUnit
+
+dn: ou=contacts,ou=rcabook,dc=localhost
+ou: contacts
+objectClass: top
+objectClass: organizationalUnit
+
+dn: ou=groups,ou=rcabook,dc=localhost
+ou: groups
+objectClass: top
+objectClass: organizationalUnit
+}}}
+If you see at least this 5 entries, your LDAP addressbook server is now ready to be filled with content.
+
+
 == Configure Roundcube ==
+
+
+== Other Clients than Roundcube ==
+There exists a lot of addressbook clients that can connect to a LDAP server. The most of them do not support contact groups yet, and the number of supported contact fields is often verry limited (please let me now if your expericance is different).
+
+Usually you have to set the following fields:
+- the hostname, or even the IP address
+- the ldap port: 389
+- the bind_dn: "cn=rcuser,dc=localhost"
+- the bind_pw: rcpass
+- the base_dn: "ou=contacts,ou=rcabook,dc=localhost"
+- optional a filter: object_class=inetOrgPerson
+
+== Finally ==
+If you have answers about this Howto, or even if you do not agree with something: please send an email to andudi[at]gmx[dot]ch or even to the Roundcube developer mail list, thanks.
+
+Andreas Dick