https://ebasso.net/wiki/index.php?action=history&feed=atom&title=OpenLDAP%3AConfigurando_um_LDAP_Proxy OpenLDAP:Configurando um LDAP Proxy - Revision history 2026-06-02T11:03:23Z Revision history for this page on the wiki MediaWiki 1.40.0 https://ebasso.net/wiki/index.php?title=OpenLDAP:Configurando_um_LDAP_Proxy&diff=1720&oldid=prev Ebasso at 22:43, 5 February 2013 2013-02-05T22:43:40Z <p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 22:43, 5 February 2013</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l80">Line 80:</td> <td colspan="2" class="diff-lineno">Line 80:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  idle-timeout    600s</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  idle-timeout    600s</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  map attribute memberOf ibm-allGroups</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  map attribute memberOf ibm-allGroups</div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">== Ver também ==</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*[[OpenLDAP:Configurando um LDAP Proxy]]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*[[AWSTATS: Configurando o AWSTATS]]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*[[MySQL:Configurando o MySQL]]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*[[BIND: Configurando o suporte ao Active Directory]]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*[[Tecnologias|  Mais Artigos sobre outras Tecnologias]]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*[[Apache HTTP Server|  Mais Artigos sobre Apache HTTP Server]]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*[[Linux|  Mais Artigos sobre Linux / UNIX / AIX]]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Category:Linux]]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Category:LDAP]]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Category:Tecnologias]]</ins></div></td></tr> <!-- diff cache key ebasso_wikidb:diff::1.12:old-945:rev-1720 --> </table> Ebasso https://ebasso.net/wiki/index.php?title=OpenLDAP:Configurando_um_LDAP_Proxy&diff=945&oldid=prev Ebasso: New page: Neste artigo vamos configurar o servidor OpenLDAP de maneira que ele seja um '''proxy''' para outros servidores LDAP. As vantagens desta abordagem são: # '''Segurança''' - Ao colocar u... 2010-04-21T15:06:32Z <p>New page: Neste artigo vamos configurar o servidor OpenLDAP de maneira que ele seja um &#039;&#039;&#039;proxy&#039;&#039;&#039; para outros servidores LDAP. As vantagens desta abordagem são: # &#039;&#039;&#039;Segurança&#039;&#039;&#039; - Ao colocar u...</p> <p><b>New page</b></p><div>Neste artigo vamos configurar o servidor OpenLDAP de maneira que ele seja um &#039;&#039;&#039;proxy&#039;&#039;&#039; para outros servidores LDAP.<br /> <br /> As vantagens desta abordagem são:<br /> <br /> # &#039;&#039;&#039;Segurança&#039;&#039;&#039; - Ao colocar um servidor LPAP Proxy na DMZ, acessando o LDAP Corporativo, este servidor só possui metadados evitando crashs, além de facilitar a rastreabilidade (análise de logs). <br /> <br /> # &#039;&#039;&#039;Reescrita de Queries LDAP&#039;&#039;&#039; - Muitos administradores temem expandir o schema dos seus servidores LDAP por medo de corromper o mesmo. Criando regras de reescrita podemos criar os campos necessários.<br /> <br /> <br /> == Exemplo ==<br /> <br /> Neste exemplo o OpenLDAP está simulando o MS Active Directory, e apontando para o IBM Tivoli Directory Server (TDS)<br /> <br /> Alterando o atributo de pesquisa memberOf por ibm-allGroups<br /> <br /> Edite o arquivo &#039;&#039;&#039;slapd.conf&#039;&#039;&#039;, <br /> <br /> ## LDAP PROXY SERVER<br /> <br /> database meta<br /> suffix o=empresa,c=br<br /> lastmod off <br /> <br /> uri &quot;ldap://192.168.1.10/o=empresa,c=br&quot;<br /> acl-authcDN &quot;uid=AdminLDAP,ou=usuarios,o=empresa,c=br&quot;<br /> acl-passwd &quot;adminPASSWORD&quot;<br /> idle-timeout 600s<br /> map attribute memberOf ibm-allGroups<br /> <br /> <br /> == Arquivo slapd.conf completo ==<br /> <br /> ######################################################################<br /> # Schemas que devem ser carregados<br /> #######################################################################<br /> <br /> include /etc/ldap/schema/core.schema<br /> include /etc/ldap/schema/cosine.schema<br /> include /etc/ldap/schema/inetorgperson.schema<br /> include /etc/ldap/schema/nis.schema<br /> <br /> #######################################################################<br /> # Arquivos de controle do OpenLDAP<br /> #######################################################################<br /> <br /> pidfile /var/run/slapd/slapd.pid<br /> argsfile /var/run/slapd/slapd.args <br /> <br /> #######################################################################<br /> # Nivel do log gerado pelo OpenLDAP<br /> #######################################################################<br /> logfile /var/log/slapd.log<br /> loglevel 5<br /> <br /> #######################################################################<br /> # Modulos que devem ser carregados pelo servidor OpenLDAP<br /> ####################################################################### <br /> <br /> # Load dynamic backend modules:<br /> modulepath /usr/lib/ldap<br /> moduleload back_ldap.la<br /> moduleload back_meta.la<br /> #moduleload back_monitor.la<br /> <br /> #######################################################################<br /> # Tempo de permanencia de uma conexao idle (sem trafego) <br /> #######################################################################<br /> <br /> idletimeout 600<br /> <br /> ## LDAP PROXY SERVER<br /> <br /> database meta<br /> suffix o=empresa,c=br<br /> lastmod off <br /> <br /> uri &quot;ldap://192.168.1.10/o=empresa,c=br&quot;<br /> acl-authcDN &quot;uid=AdminLDAP,ou=usuarios,o=empresa,c=br&quot;<br /> acl-passwd &quot;adminPASSWORD&quot;<br /> idle-timeout 600s<br /> map attribute memberOf ibm-allGroups</div> Ebasso