Bài đăng

Đang hiển thị bài đăng từ Tháng 8, 2014

Service Provider Registering with Identity Provider Configuration Continuation

Identity Provider Configuration Login as a root or sudo user to configure the identity provider attributes. 1. Configure attribute-resolver.xml Go to the /opt/shibboleth-idp/conf directory and edit the attribute-resolver.xml file. 1.1 Define LDAP Connector Configuration Uncomment the <resolver:DataConnector and modify the configuration as per your environment. <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"         ldapURL="ldap://<Ldap Host Name>"         baseDN="ou=people,dc=vphuc,dc=local"         principal="cn=Manager,dc=vphuc,dc=local"         principalCredential="<Password>">         <dc:FilterTemplate>             <![CDATA[                 (uid=$requestContext.principalName)             ]]>         </dc:FilterTemplate>     </resolver:DataConnector> 1.2 Define the Target ID     <resolver:DataConnector xsi:type="dc:ComputedId&qu

CentOS 6 – Enable logging for OpenLDAP

[root@cmlin02 openldap]# vi /etc/rsyslog.conf ... # LDAP local4.* /var/log/ldap.log ... [root@cmlin02 openldap]# /etc/init.d/rsyslog restart Shutting down system logger: [ OK ] Starting system logger: [ OK ] [root@cmlin02 openldap]# touch /var/log/ldap.log [root@cmlin02 openldap]# service slapd restart [root@cmlin02 log]# tail -100f /var/log/ldap.log ... Jul 25 10:43:24 cmlin02 slapd[10271]: conn=1019 op=196 SRCH attr=cn Jul 25 10:43:24 cmlin02 slapd[10271]: <= bdb_equality_candidates: (member) not indexed Jul 25 10:43:24 cmlin02 slapd[10271]: <= bdb_equality_candidates: (uniqueMember) not indexed Jul 25 10:43:24 cmlin02 slapd[10271]: conn=1019 op=196 SEARCH RESULT tag=10