phpLDAPadmin HowTo

[Nas (Artem Fedai)]

SO first enable REPO EPEL

wget http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
sudo rpm -Uvh epel-release-6*.rpm
yum install yum-utils
Disabling REPO for futher updates : 
yum-config-manager --disable epel


    # yum --enablerepo=epel -y install phpldapadmin

    # vi /etc/phpldapadmin/config.php

# line 397: uncomment, line 398: comment out
$servers->setValue('login','attr','dn');
// $servers->setValue('login','attr','uid');

    # vi /etc/httpd/conf.d/phpldapadmin.conf

Alias /phpldapadmin /usr/share/phpldapadmin/htdocs
Alias /ldapadmin /usr/share/phpldapadmin/htdocs

  Order Deny,Allow
  Deny from all
  Allow from 127.0.0.1 10.0.0.0/24     # add access permission
  Allow from ::1


    # service httpd restart

    # http://(server's hostname or IP address)/ldapadmin/  
login : cn=libuser,dc=directory,dc=nh 
password : cat /var/lib/nethserver/secrets/libuser

[feenix]

cudos this works like a treat.
BTW, is it save to upgrade packages from epel repo, or does it break anything on ns side?

[Nas (Artem Fedai)]

U could disable repo as well ! and if u need some packeges from it use yum --enablerepo=epel -y install

[dz00te]

wow great. tnx @Nas
Maybe as seen in older posts, for the epel repo is better to disable it in the howto
so noone (like me) can forget it enabled

eorepo centos-base centos-updates nethserver-base nethserver-updates

what do you think?

[AbsyntH (Michele Bortolotto)]

ok howto works, of course i’ve move all the conversation… @alefattorini can you fix it ?

[Ya_Ley (L)]

Hi
I try following the step on Nethserver 7, it cans not login for cn=libuser,dc=directory,dc=nh
but when use Anonymous, can log in.
the Nethserver 7 is not allow to libuser login ?

Thank you

[davidep (Davide Principi)]

Don’t use libuser! We are working on LDAP ACLs, on rc3 you should use admin credentials. On rc2 you’d better wait

Good news are @stephdl is working on a RPM for phpLDAPadmin!

SSSD.pm and phpldapadmin

Thinking loudly, if you can en-light me, please jump I must admit, I’m a zero for what it concerns ldap (openldap or samba4 ad), I know to use, but with a lot of effort, anyway it is not the purpose of this post. sometime if you can read it, you have one part solved of your problem, hence the necessity of a contrib. first why phpldapadmin…there is plenty documentations, I know there is other software, I’m hearing you I want to do a phpldapadmin with two modes (two users) read…

[Ya_Ley (L)]

Thank you, when the rc3 will be release.

[alefattorini (Alessio Fattorini)]

We have to close some issues before the release
https://github.com/NethServer/dev/projects/2

[stephdl (Stéphane de Labrusse)]

Thanks for the reminder

[fausp (fpausp)]

Tried to install phpldapadmin but when I use the url http://myserverip/ldapadmin/ I get:

[stephdl (Stéphane de Labrusse)]

Are you on your lan, default is restricted to the local network, did you use the default admin user ?

[fausp (fpausp)]

@stephdl

Are you on your lan, default is restricted to the local network,

Yes I am.

@stephdl

did you use the default admin user ?

No, because I get the error immediately bevor credetials are asked…

[stephdl (Stéphane de Labrusse)]

Ldap or samba ad ?

[fausp (fpausp)]

This Nethserver is a member of a MS AD.

[stephdl (Stéphane de Labrusse)]

Not tested this case, normally it just should work.

[fausp (fpausp)]

OK, any idea what I could do?

[stephdl (Stéphane de Labrusse)]

Check httpd/messages/secure log to understand what it occurs

[fausp (fpausp)]

cat /var/log/httpd/error_log

[Thu Mar 12 10:01:59.664762 2020] [authz_core:error] [pid 26079] [client 192.168.xxx.xxx:50179] AH01630: client denied by server configuration: /usr/share/phpldapadmin/htdocs