Written by Ben Chavet (ben [at] horde [dot] org)
This document is intended to help administrators set up a new Horde 3 installation using a new LDAP directory. Installing and configuring an LDAP directory is outside the scope of this document. It is assumed that you have a working LDAP directory, and that we will be adding a new branch to it. Please feel free to fill in any gaps or to clarify any existing information presented here.
For starters, this will be a running progress of what I am doing to set up a working Horde installation using LDAP.
We will be using the following standards and assumptions throughout this document. Please adjust accordingly to your situation.
There are a few schema files that need to be included in the slapd config file. These files are located in horde/scripts/ldap/horde.schema, and turba/scripts/ldap/rfc2739.schema. Copy these files to /etc/openldap/schema, and add these lines to the global section in /etc/openldap/slapd.conf:
include /etc/openldap/schema/horde.schema include /etc/openldap/schema/rfc2739.schema
Then, restart slapd for these changes to take effect.
Put the following in a file named horde.ldif. Don't worry about the password values just yet, we'll be changing them in a minute. Also, make sure to adjust the dn values for your directory.
dn: cn=horde,ou=DSA,dc=example,dc=com objectclass: organizationalRole objectClass: top objectClass: simpleSecurityObject userPassword: superSecretPassword cn: horde dn: ou=horde,dc=example,dc=com objectclass: organizationalUnit ou: horde dn: uid=admin,ou=horde,dc=example,dc=com objectclass: top objectclass: uidobject objectclass: person objectclass: hordePerson objectclass: calentry uid: admin cn: Administrator sn: Administrator userpassword: supersecretpassword
Then, run the following command to import the entries into the LDAP directory. You will be prompted for the LDAP root password.
ldapadd -x -h localhost -D "cn=root,dc=example,dc=com" -f horde.ldif -W
The new accounts that we just created have generic passwords, so we need to set them to something reasonable. Run the following two commands to set the passwords. Be sure to replace secretpassword with the real passwords you want to have set.
Set the password for cn=horde,ou=DSA,dc=example,dc=com:
ldappasswd -x -h localhost -D "cn=root,dc=example,dc=com" -s secretpassword -W cn=horde,ou=DSA,dc=example,dc=com
Set the password for uid=admin,ou=horde,dc=example,dc=com:
ldappasswd -x -h localhost -D "cn=root,dc=example,dc=com" -s secretpassword -W uid=admin,ou=horde,dc=example,dc=com
These are the minimum directory permissions required for horde to work properly.
access to dn.children="ou=horde,dc=example,dc=com" attrs=userPassword by dn="cn=horde,ou=DSA,dc=example,dc=com" write by self write by anonymous auth by * none access to "ou=horde,dc=example,dc=com" by "cn=horde,ou=DSA,dc=example,dc=com" write by self read by * none