From dcddaaf82f418bc024c444682e892a039f2e6ab5 Mon Sep 17 00:00:00 2001 From: "jr2158@student.uni-lj.si" Date: Fri, 17 Feb 2017 11:09:37 +0000 Subject: How to for ldap_search task. git-svn-id: https://svn.lusy.fri.uni-lj.si/kpov-public-svn/kpov-public@378 5cf9fbd1-b2bc-434c-b4b7-e852f4f63414 --- kpov_judge/tasks/ldap_search/howtos/en/Pic1.jpg | Bin 0 -> 182463 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic2.1.jpg | Bin 0 -> 160469 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic2.2.jpg | Bin 0 -> 154389 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic2.3.jpg | Bin 0 -> 157859 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic3.1.jpg | Bin 0 -> 64216 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic3.2.jpg | Bin 0 -> 76701 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic3.3.jpg | Bin 0 -> 65002 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic3.4.jpg | Bin 0 -> 63397 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic3.5.jpg | Bin 0 -> 73509 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic3.6.jpg | Bin 0 -> 78701 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic3.7.jpg | Bin 0 -> 57151 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic3.8.jpg | Bin 0 -> 63569 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic4.jpg | Bin 0 -> 111844 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic5.jpg | Bin 0 -> 129138 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic6.jpg | Bin 0 -> 146213 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic7.jpg | Bin 0 -> 64296 bytes kpov_judge/tasks/ldap_search/howtos/en/Pic8.jpg | Bin 0 -> 56538 bytes kpov_judge/tasks/ldap_search/howtos/en/index.html | 97 +++++++++++++++++----- 18 files changed, 74 insertions(+), 23 deletions(-) create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic1.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic2.1.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic2.2.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic2.3.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic3.1.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic3.2.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic3.3.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic3.4.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic3.5.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic3.6.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic3.7.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic3.8.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic4.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic5.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic6.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic7.jpg create mode 100644 kpov_judge/tasks/ldap_search/howtos/en/Pic8.jpg (limited to 'kpov_judge/tasks/ldap_search/howtos') diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic1.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic1.jpg new file mode 100644 index 0000000..fecb706 Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic1.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic2.1.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic2.1.jpg new file mode 100644 index 0000000..085f1cc Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic2.1.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic2.2.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic2.2.jpg new file mode 100644 index 0000000..cb9975c Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic2.2.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic2.3.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic2.3.jpg new file mode 100644 index 0000000..1069e1a Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic2.3.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic3.1.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.1.jpg new file mode 100644 index 0000000..0c00ddd Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.1.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic3.2.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.2.jpg new file mode 100644 index 0000000..d488e43 Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.2.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic3.3.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.3.jpg new file mode 100644 index 0000000..2ea916c Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.3.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic3.4.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.4.jpg new file mode 100644 index 0000000..24db305 Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.4.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic3.5.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.5.jpg new file mode 100644 index 0000000..d2ff304 Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.5.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic3.6.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.6.jpg new file mode 100644 index 0000000..0ab07d0 Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.6.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic3.7.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.7.jpg new file mode 100644 index 0000000..44ca494 Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.7.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic3.8.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.8.jpg new file mode 100644 index 0000000..855353b Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic3.8.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic4.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic4.jpg new file mode 100644 index 0000000..4aab71d Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic4.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic5.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic5.jpg new file mode 100644 index 0000000..07a60de Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic5.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic6.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic6.jpg new file mode 100644 index 0000000..48c6606 Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic6.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic7.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic7.jpg new file mode 100644 index 0000000..58b8bdf Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic7.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/Pic8.jpg b/kpov_judge/tasks/ldap_search/howtos/en/Pic8.jpg new file mode 100644 index 0000000..c9d053e Binary files /dev/null and b/kpov_judge/tasks/ldap_search/howtos/en/Pic8.jpg differ diff --git a/kpov_judge/tasks/ldap_search/howtos/en/index.html b/kpov_judge/tasks/ldap_search/howtos/en/index.html index 28b0ae0..0ee5f2a 100644 --- a/kpov_judge/tasks/ldap_search/howtos/en/index.html +++ b/kpov_judge/tasks/ldap_search/howtos/en/index.html @@ -1,23 +1,74 @@ - - - - - -

Task: ldap search

-

-

Summary

-Create 2 virtual sistems called SimpleArbiterDhcp and LDAPServer. Using SimpleArbiterDhcp connect to the LDAP server on the other virtual sistem and create an user. -

-

-

Instructions

- 1. Download disk SimpleArbiterDhcp from the page where drives for our tasks are. - 2. Using the downloaded drive, create a new virtual machine called SimpleArbiterDhcp in Virtualbox(Image 1) - 3. Create a second virtual machine called LDAPServer. - 4. Log in using username root and password kaboom. - 5. Set up the LDAP server on the LDAPServer machine using apt-get install ldap-utils.(Image 2) - 6. After you have done that, restart the server. - 7. From SimpleArbiterDhcp connect to the LDAP server on the machine LDAPServer. - 8. Create an user or supervise the data you need on the server. -

- - + + + + ldap_search + + + + +

ldap_search

+

Purpose of the exercise

+

How to setup a LDAP Server, to add entries to a LDAP Server, and to change users' rights to be able to add entries and change the attributes of entries.

+ +

How To

+ +
    +
  1. Create two virtual machines, SimpleArbiterDhcpGWLDAP(simpleArbiterDhcpGWLDAP.vdi) and LDAPServer(student-LDAPServer.vdi). +
    No img
    2. +
    +
  2. Change the network settings to both virtual machines. SimpleArbiterDhcpGWLDAP: Adapter 1 is set to "NAT" for internet access and + adapter 2 to "internal network" for local network. LDAPServer: Adapter 1 set to "internal network" sot that it is in the same internal network as SimpleArbiterDhcpGWLDAP. +
    No img +
    No img +
    No img
    3. +
    +
  3. In SimpleArbiterDhcpGWLDAP log in as user "tester", in LDAPServer log in as user "root", run the command "apt-get update" to update the list of packages and + open up another terminal by pressing "ALT+F2" and log in as user "student".
    4. +
    +
  4. In LDAPServer run the command "apt-get install slapd ldap-utils" to install these packages which are the LDAP server and tools to access and manage the LDAP server. +
    During the LDAP server installation you'll have to provide the password for the user "admin", the administrator of the server and confirm the password chosen.
    5. +
    +
  5. Configure the LDAP server by choosing the appropriate domain name and other configuration parameters. Execute the commmand "dpkg-reconfigure slapd". +
    No img +
    No img +
    No img +
    No img +
    No img +
    No img +
    No img +
    No img +
    a) If you will configure the "slapd" again don't forget to remove the old database "rm -rf /var/backups/unknown-2.4.44+dfsg-2.ldapdb".
    6. +
    +
  6. Now that the LDAP server is configured for use, try to open a third console and log in as user "student" and execute the command "ldapsearch -D cn=admin,dc=ceres-20,dc=kpov, + dc=lusy,dc=fri,dc=uni-lj,dc=si -W -b dc=ceres-20,dc=kpov,dc=lusy,dc=fri,dc=uni-lj,dc=si", which will show the entries in the server. +
    Because you will be using a lot the domain name to access the LDAP server you can set the environment variable "D", which will allow for quicker typing of commands. +
    "export D=dc=ceres-20,dc=kpov,dc=lusy,dc=fri,dc=uni-lj,dc=si" +
    "ldapsearch -D cn=admin,$D -wvaje -b $D"
    7. +
    +
  7. Create the file(LDIF format) "users.ldif" which will contain the objects(users) that we want to add to the LDAP server database. +
    No img +
    Execute the following command to add users to the LDAP server: +
    "ldapadd -D cn=admin,$D -wvaje -f users.ldif" +
    Add password to the users added to the LDAP server: +
    "ldappasswd -D cn=admin,$D -wvaje -sj2531e cn=ninavidmar,ou=users,$D" +
    "ldappasswd -D cn=admin,$D -wvaje -scTyRM0 cn=natalijaribnikar39,ou=users,$D" +
    Execute command "ldapsearch -D cn=natalijaribnikar39,ou=users,$D -wcTyRM0 -b $D" to bind to the LDAP server with the newly added user "natalijaribnikar39" and to see the entries currently in the LDAP server. +
    No img
    8. +
    +
  8. In order to change the users' rights settings, which allows a user to add entries to the directory and change values of attributes of entries in the directory you need to create an additional file acl.ldif: +
    To see which backend database is used and other settings related to the users' rights execute command "ldapsearch -Y EXTERNAL -H ldapi:/// -b cn=config" as root user in the system, which does not need the user authentication to the LDAP server. +
    No img +
    The settings in the acl.ldif file: +
    No img +
    Now to change users' rights run the command "ldapmodify -Y EXTERNAL -H ldapi:/// -f acl.ldif" as user "root" in the system.
    9. +
    +
  9. The user "natalijaribnikar39" has the right to add or change objects in the LDAP server. +
    Now try to bind to the LDAP server using "natalijaribnikar39" user's credentials and add a new user to the server directory. +
    "ldapadd -D cn=natalijaribnikar39,ou=users,$D -wcTyRM0 -f newuser.ldif"
    10. +
    +
  10. Now to test your result go to the SimpleArbiterDhcpGWLDAP virtual machine and run "./test_task.py" to run the test and see your score. +
    No img
    11. + +
+ + -- cgit v1.2.1