![让 bitnami openLDAP 与 memberOf 和 ldif 用户配置一起工作](https://linux22.com/image/794178/%E8%AE%A9%20bitnami%20openLDAP%20%E4%B8%8E%20memberOf%20%E5%92%8C%20ldif%20%E7%94%A8%E6%88%B7%E9%85%8D%E7%BD%AE%E4%B8%80%E8%B5%B7%E5%B7%A5%E4%BD%9C.png)
我正在尝试使用 memberOf 功能配置 bitnami ldap 服务器 (docker)。我已经为用户和组安装了架构目录 (带有覆盖 ldif) 和 ldif 目录。
这是我的覆盖:
# Load modules
dn: cn=module,cn=config
cn: module
objectClass: olcModuleList
olcModuleLoad: memberof
olcmoduleload: refint
olcModulePath: /opt/bitnami/openldap/lib/openldap
#memberof overlay
dn: olcOverlay=memberof,olcDatabase={2}mdb,cn=config
objectClass: olcMemberOf
objectClass: olcOverlayConfig
objectClass: olcConfig
objectClass: top
olcOverlay: memberof
olcMemberOfDangling: ignore
olcMemberOfRefInt: TRUE
olcMemberOfGroupOC: groupOfNames
olcMemberOfMemberAD: member
olcMemberOfMemberOfAD: memberOf
#refint overlay
dn: olcOverlay=refint,olcDatabase={2}mdb,cn=config
objectClass: olcOverlayConfig
objectClass: olcRefintConfig
olcOverlay: refint
olcRefintAttribute: owner
olcRefintAttribute: manager
olcRefintAttribute: member
olcRefintAttribute: memberOf
这里是用户和组:
dn: dc=maxcrc,dc=com
changetype: add
objectClass: domain
objectClass: top
dc: maxcrc
dn: ou=People,dc=maxcrc,dc=com
changetype: add
objectclass: top
objectclass: organizationalUnit
ou: People
description: Container for user entries
dn: ou=Groups,dc=maxcrc,dc=com
changetype: add
objectclass: top
objectclass: organizationalUnit
ou: Groups
description: Container for group entries
dn: cn=admingroup,ou=Groups,dc=maxcrc,dc=com
changetype: add
objectClass: groupOfNames
cn: admingroup
member: cn=Jack Miller,ou=People,dc=maxcrc,dc=com
dn: cn=Jack Miller,ou=People,dc=maxcrc,dc=com
changetype: add
objectClass: top
objectClass: person
objectClass: organizationalPerson
cn: Jack Miller
sn: miller
userPassword: 1234
如果我尝试将“memberOf:cn=admingroup,ou=Groups,dc=maxcrc,dc=com”添加到用户 miller,服务器将无法启动。也许有一个示例 ldif 应该可以工作?
我尝试了网页示例,也阅读了 stackoverflow 问答,但都无济于事。在调试模式下出现此错误 (32 - 错误的 dn???):
memberof_value_modify DN="cn=jack miller,ou=people,dc=maxcrc,dc=com" 添加 memberOf="cn=admingroup,ou=Groups,dc=maxcrc,dc=com" 失败 err=32