openldap – This packages contains the LDAP support libraries.openldap-clients – This contains all required LDAP client utilities.openldap-servers – This is the main LDAP server.You should install the following three packages: yum install -y openldap openldap-clients openldap-servers On CentOS and RedHat, use yum install as shown below, to install the openldap related packages. Now lets see how to setup a single instance of an LDAP server that can be used by multiple clients in your network for authentication.

This makes OpenLDAP a lightweight directory, especially when compared to other directory servers such as Microsoft’s Active directory. You can easily build an openLDAP hierarchy where objects in the other locations are easily referred to without storing them on local servers. This is the reason why openLDAP is so widely used. If you noticed in the FDN (fully distinguished name), a comma is used a separator and not a dot, which is common in DNS.īy using the different LDAP entry types, you can setup a hierarchical directory structure. If in a setup the LDAP hierarchy is mapped to a DNS hierarchy, typically all DNS domains are referred to as DC objects.įor example, if there is user in the hierarchy, the fully distinguished name of this user is referred as cn=sam, dc=thegeekstuff, dc=com. dc (domain component) – This refers to one of the container entries in the LDAP hierarchy.cn (common name) – This refers to the leaf entries, which are end objects (for example: users and groups).The following are the two most commonly used objects in OpenLDAP: The OpenLDAP hierarchy is almost similar to the DNS hierarchy. The information is stored and organized in a hierarchical manner and the advantage of this approach is that the information can be grouped into containers and clients can access these containers whenever needed. This centrally stored information is organized in a directory that follows X.500 standard. LDAP is a solution to access centrally stored information over network. LDAP stands for Lightweight Directory Access Protocol.

Ldapsearch redhat