Open eldership installation, this lesson is actually related to module five, where we covered at what
how the users are created when we need an active directory type of dirty services.
So I am including in this module is because in this module, that's where we have enabled and networking
to talk to the outside world, which is to have Internet enabled.
So if you need to go back to Module five and review what LDAP Open Elderberries, what are the differences
between each of the directory services, you should go back and review it and then you could always
come back to this lesson anyway.
So open up.
What exactly open LDAP is so open.
Well, that is basically an open source implementation of lightweight ectrodactyly access protocol,
which is also adept.
It is developed by Open LDAP project.
So there is a company which is open source.
They actually do community work.
A lot of people have joined together to build this product called Open Helda.
And it is an Internet protocol that email and other programs like User Access used to look up contact
information from the server.
It is released under open elder public license.
It is available for all major Linux distributions.
Also IEX, Android, Spook's, OSX, Solaris and even Windows are nowadays using open L'il.
There is a need because it's free and you would have to pay active directory for for that product to
Microsoft.
So it is becoming very popular, especially in the next world when you have thousands of users that
you need to manage and you need to have them access to many different servers.
So that's pretty much what Open LDAP is now.
The Open Eldard.
Once we do the installation, it's completed.
The service that we need to have enabled and running is called s LAPD to stop and start the service
for Open LDAP.
It simply systems CTL start as LAPD.
Same thing if you wanted to enable it, meaning if you want the service to start when you computer or
you and your Linux boot up, then you have to run the command system.
CTL enable s LAPD.
Of course I didn't include the stop.
I'm sure you would know that.
And also you could do the restart command as well as system ctrl restart with the service name.
Where are the configuration files are located.
Once you have the open elab installation successfully completed then you will find that in ETSI Open
LDAP as LAPD.
This is the directory where you have all the configuration files where you could go and make changes
to it.
So let's go into that log into our Linux machine and we'll go over the installation of Open LDAP.
OK, so I have this Linux machine open, I am logged in as myself, I will become root.
OK, now, before you go ahead and do the installation, make sure your Lennix machine can go outside
the Internet and the best way to find out is always to ping command, to ping any server that you like.
And if you get the 64 byte back and ICMP is coming back with the time to ping, then it means you can
reach it.
You could reach the Google server.
Perfect.
Let's clear the screen.
Now, the command to install the open Helda is youm.
Install.
Open El.
Depp, I believe it's open LDAP or it's probably open dash eldership.
But anyway, we will try.
Just open ULDA and I want to do Esterbrook here and as well as I want to do a story here.
The reason I want to put these stars before and after it means any package that man that matches open
with the open Eldo comes after the name or before a name.
Then it will download all the open helda packages.
So go ahead, hit enter.
It's going to go out and check all the mirrors, all the repositories that are available to us, and
here it has a list of all the open LDAP packages, all the RPM's, and then you could see installing
the packages you'll see right here.
Here's a list of all the packages that it will install on your system.
And here is a quick summary for the transaction.
And you could see the size is four point five megabyte.
So is it is this OK?
Yes, of course.
You want to install that.
So hit wi and hit enter.
So always first it downloads the packages, once the packages are downloaded, then it goes through
the installation of those packages.
Once installation is completed, it will clean up any of the remaining things that it's not needed.
It'll clean up.
It'll verify the packages are done, it's installed, and it will give you a quick summary at the bottom.
And when you see the the message right at the bottom is complete, it means it has completed successfully.
So now you had the open eldership installation completed.
Now it's time to do the configuration.
Just one thing I just want to add quickly, I am not going to do the complete installation or sorry,
complete configuration of the open LD up is because it requires a lot of work.
It is a completely separate topic because it could take hours and hours depending on how do you want
to configure it based on your environment.
It's just a matter of open up.
I want you to have some kind of exposure to it so you know how to install it.
How does it work?
And there is a way if you need to have some kind of directory services in your environment, then that's
how you go about it.
So now we have a download.
So let's say if you want to enable, start the service.
So you remember to start the service is system qty URL.
Start as LAPD.
OK, so it has started and how do you verify it, you could just do system ctrl status and you will
see that it is up and running, especially when you have when you using a GUI terminal, you will see
is active and running and it is in green and all the other packages and packet information where those
are located, where the file is located.
Everything is here.
You could also test another way that if it has if the service or the process is running and I'm sure
you know by by now that Comen is piesse minus EAF and then you go for s LAPD.
And you will see right here, the first line you'll see held up, use it, Espin.
This is a process that is running again.
The second one is just the process.
It's just a command itself.
Since I ran the command, it is grabbing for itself.
So the first one has verified that we have the open LD up process.
It's running the configuration file are located in at the open, held up as a PD dot d directory.
When you do when you go into this directory you could do simply this minus L or L tr you will see these
are the configuration file.
You would have to go into these configuration file, modified the way you want to and on your system,
on your system, local file system, you would have to actually go to one more file which is Azzi and
the file name is and a switch.
Dakkar file, if you go into that car pile, you'll see right here.
It's his password.
See right here, it's his files.
It means first, and every time I use a login, it will go to a file.
And which file is that?
That file is at sea password, that is a kind of a local database that is in your Linux machine or local
file that keeps the inventory of all the users that are locally created.
So the first time a user logs in, it will always go to a file.
And if the user is not found, then it will go to another one.
Then you have to see as you have to replace it with l d a p elde.
It will go to that LDAP machine and then it will get authenticated.
Now remember one thing that l that P have installed ld up on the same machine that we need authentication
from.
So this is usually not how the environment or the scenario works.
Usually system administrators, they installed open all the software on another Linux machine which
becomes a directory server, and then you could go in and configure on your client where to look up
for LDAP services.
You have to modify your ETSI hostname and few other files.
And again, as I said before, there are a few configuration changes that you would have to make.
And I will include an article that I have from online.
One of the open LDAP has the article, How to Configure It.
So if you really are interested in configuring Open LDAP and your open up server, you can review that
article and then you will be able to configure it.
So anyway, hopefully you have it installed correctly and now you understand the clear difference between
all those directory servers or services that are out there.