← Back to branch summary

~linkat/+junk/linkat-servidor-18.04

« back to all changes in this revision

Viewing changes to debian/linkat-servidor/usr/share/linkat/linkat-servidor/plantilles/ldap.sh

  • Committer: Francesc Konate
  • Date: 2019-07-22 13:09:57 UTC
  • Revision ID: jfkoga@gmail.com-20190722130957-etjtlmd295sjt0f2
108:[MOD]Location of patches folder> /usr/share/linkat/linkat-servidor

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/linkat-servidor/usr/share/linkat/linkat-servidor/plantilles/ldap.sh
1
 
#!/bin/bash
2
 
 
3
 
check()
4
 
{
5
 
if  [ ! "$?" -eq 0 ]; then
6
 
        exit 22
7
 
fi
8
 
}
9
 
 
10
 
ldapadd -x -D cn=admin,dc=__DOMAIN__ -w "__PASSROOT__" -f ldapconfig.ldif
11
 
check
12
 
 
13
 
ldapadd -x -D cn=admin,dc=__DOMAIN__ -w "__PASSROOT__" -f grups.ldif
14
 
check
15
 
 
16
 
sudo ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f uid_index.ldif
17
 
check
18
 
 
19
 
sudo ldapadd -Q -Y EXTERNAL -H ldapi:/// -f corba.ldif
20
 
check
21
 
 
22
 
sudo ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f logging.ldif
23
 
check
24
 
 
25
 
sudo systemctl restart syslog.service
26
 
 
27
 
sudo sh -c "certtool --generate-privkey > /etc/ssl/private/cakey.pem"
28
 
check
29
 
sudo certtool --generate-self-signed \
30
 
       --load-privkey /etc/ssl/private/cakey.pem \
31
 
       --template /etc/ssl/ca.info \
32
 
       --outfile /etc/ssl/certs/cacert.pem
33
 
check
34
 
 
35
 
sudo certtool --generate-privkey \
36
 
        --sec-param Medium \
37
 
        --outfile /etc/ssl/private/servidor_slapd_key.pem
38
 
check
39
 
 
40
 
sudo certtool --generate-certificate \
41
 
        --load-privkey /etc/ssl/private/servidor_slapd_key.pem \
42
 
        --load-ca-certificate /etc/ssl/certs/cacert.pem \
43
 
        --load-ca-privkey /etc/ssl/private/cakey.pem \
44
 
        --template /etc/ssl/servidor.info \
45
 
        --outfile /etc/ssl/certs/servidor_slapd_cert.pem
46
 
check
47
 
 
48
 
sudo chgrp openldap /etc/ssl/private/servidor_slapd_key.pem
49
 
check
50
 
 
51
 
sudo chmod 0640 /etc/ssl/private/servidor_slapd_key.pem
52
 
check
53
 
 
54
 
sudo gpasswd -a openldap ssl-cert
55
 
check
56
 
 
57
 
sudo systemctl restart slapd.service
58
 
check
59
 
 
60
 
sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f certinfo.ldif
61
 
check