§£ §â§Ñ§Ù§Õ§Ö§Ý§Ö §¡§Õ§Þ§Ú§ß§Ú§ã§ä§â§Ú§â§à§Ó§Ñ§ß§Ú§Ö ¡ú §¡§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§ñ §Þ§à§Ø§ß§à §Ù§Ñ§Õ§Ñ§ä§î §Ô§Ý§à§Ò§Ñ§Ý§î§ß§í§Û §Þ§Ö§ä§à§Õ §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§Ú §Ó Áú»¢¶Ä²©. §¥§à§ã§ä§å§á§ß§í §ã§Ý§Ö§Õ§å§ð§ë§Ú§Ö §Þ§Ö§ä§à§Õ§í §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§Ú §Ó§ß§å§ä§â§Ö§ß§ß§Ú§Û, HTTP §Ú LDAP.
§°§Ò§â§Ñ§ä§Ú§ä§Ö §Ó§ß§Ú§Þ§Ñ§ß§Ú§Ö, §é§ä§à §Þ§Ö§ä§à§Õ §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§Ú §Þ§à§Ø§ß§à §Ú§Ù§Þ§Ö§ß§Ú§ä§î §ß§Ñ §å§â§à§Ó§ß§Ö §Ô§â§å§á§á§í §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§Ö§Û.
§±§à §å§Þ§à§Ý§é§Ñ§ß§Ú§ð, §Ô§Ý§à§Ò§Ñ§Ý§î§ß§à §Ú§ã§á§à§Ý§î§Ù§å§Ö§ä§ã§ñ §Ó§ß§å§ä§â§Ö§ß§ß§Ú§Û §Þ§Ö§ä§à§Õ Áú»¢¶Ä²© §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§Ú. §¹§ä§à§Ò§í §Ú§Ù§Þ§Ö§ß§Ú§ä§î §Ö§Ô§à:
§±§à§ã§Ý§Ö §Ù§Ñ§Ó§Ö§â§ê§Ö§ß§Ú§ñ §ß§Ñ§Ø§Þ§Ú§ä§Ö §ß§Ñ §°§Ò§ß§à§Ó§Ú§ä§î §Ó§ß§Ú§Ù§å §æ§à§â§Þ§í.
§¥§Ý§ñ §á§â§à§Ó§Ö§â§Ü§Ú §Ú§Þ§×§ß §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§Ö§Û §Ú §á§Ñ§â§à§Ý§Ö§Û §Þ§à§Ø§ß§à §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ä§î HTTP §Ú§Ý§Ú §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§ð §ß§Ñ §à§ã§ß§à§Ó§Ö §Ó§Ö§Ò-§ã§Ö§â§Ó§Ö§â§Ñ (§ß§Ñ§á§â§Ú§Þ§Ö§â: Basic Authentication, NTLM/Kerberos). §°§Ò§â§Ñ§ä§Ú§ä§Ö §Ó§ß§Ú§Þ§Ñ§ß§Ú§Ö, §é§ä§à §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§î §Õ§à§Ý§Ø§Ö§ß §ä§Ñ§Ü§Ø§Ö §ã§å§ë§Ö§ã§ä§Ó§à§Ó§Ñ§ä§î §Ú §Ó Áú»¢¶Ä²©, §à§Õ§ß§Ñ§Ü§à, §Ö§Ô§à Áú»¢¶Ä²© §á§Ñ§â§à§Ý§î §ß§Ö §Ò§å§Õ§Ö§ä §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ä§î§ã§ñ.
§¢§å§Õ§î§ä§Ö §à§ã§ä§à§â§à§Ø§ß§í! §µ§Ò§Ö§Õ§Ú§ä§Ö§ã§î, §é§ä§à §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§ñ §ß§Ñ §à§ã§ß§à§Ó§Ö §Ó§Ö§Ò-§ã§Ö§â§Ó§Ö§â§Ñ §ß§Ñ§ã§ä§â§à§Ö§ß§Ñ §Ú §â§Ñ§Ò§à§ä§Ñ§Ö§ä §Ü§à§â§â§Ö§Ü§ä§ß§à §á§Ö§â§Ö§Õ §ä§Ö§Þ §Ü§Ñ§Ü §á§Ö§â§Ö§Ü§Ý§ð§é§Ú§ä§î§ã§ñ §ß§Ñ §ß§Ö§×.
§±§Ñ§â§Ñ§Þ§Ö§ä§â§í §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú§Ú:
§±§Ñ§â§Ñ§Þ§Ö§ä§â | §°§á§Ú§ã§Ñ§ß§Ú§Ö |
---|---|
§¡§Ü§ä§Ú§Ó§Ñ§è§Ú§ñ HTTP §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§Ú | §°§ä§Þ§Ö§ä§î§ä§Ö, §é§ä§à§Ò§í §Ñ§Ü§ä§Ú§Ó§Ú§â§à§Ó§Ñ§ä§î HTTP §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§ð. |
§¥§Ú§Ñ§Ý§à§Ô §Ó§ç§à§Õ§Ñ §Ó §ã§Ú§ã§ä§Ö§Þ§å §á§à §å§Þ§à§Ý§é§Ñ§ß§Ú§ð | §µ§Ü§Ñ§Ø§Ú§ä§Ö §Ü§å§Õ§Ñ §ã§Ý§Ö§Õ§å§Ö§ä §á§Ö§â§Ö§ß§Ñ§á§â§Ñ§Ó§Ý§ñ§ä§î §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§Ö§Û §ß§Ö §á§â§à§ê§Ö§Õ§ê§Ú§ç §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§ð §å§ã§á§Ö§ê§ß§à: §¥§Ú§Ñ§Ý§à§Ô §Ó§ç§à§Õ§Ñ §Ó §ã§Ú§ã§ä§Ö§Þ§å Áú»¢¶Ä²© - §ã§ä§Ñ§ß§Õ§Ñ§â§ä§ß§Ñ§ñ §ã§ä§â§Ñ§ß§Ú§è§Ñ §Ó§ç§à§Õ§Ñ §Ó Áú»¢¶Ä²©. HTTP §Õ§Ú§Ñ§Ý§à§Ô §Ó§ç§à§Õ§Ñ §Ó §ã§Ú§ã§ä§Ö§Þ§å - §ã§ä§â§Ñ§ß§Ú§è§Ñ §Ó§ç§à§Õ§Ñ HTTP. §²§Ö§Ü§à§Þ§Ö§ß§Õ§å§Ö§ä§ã§ñ §Ó§Ü§Ý§ð§é§Ú§ä§î §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§ð §ß§Ñ §à§ã§ß§à§Ó§Ö §Ó§Ö§Ò-§ã§Ö§â§Ó§Ö§â§Ñ §ä§à§Ý§î§Ü§à §Õ§Ý§ñ index_http.php §ã§ä§â§Ñ§ß§Ú§è§í. §¦§ã§Ý§Ú §¥§Ú§Ñ§Ý§à§Ô §Ó§ç§à§Õ§Ñ §Ó §ã§Ú§ã§ä§Ö§Þ§å §á§à §å§Þ§à§Ý§é§Ñ§ß§Ú§ð §Ù§Ñ§Õ§Ñ§ß §Ù§ß§Ñ§é§Ö§ß§Ú§Ö§Þ 'HTTP §Õ§Ú§Ñ§Ý§à§Ô §Ó§ç§à§Õ§Ñ §Ó §ã§Ú§ã§ä§Ö§Þ§å' §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§î §Ò§å§Õ§Ö§ä §Ó§ç§à§Õ§Ú§ä§î §Ó §ã§Ú§ã§ä§Ö§Þ§å §Ñ§Ó§ä§à§Þ§Ñ§ä§Ú§é§Ö§ã§Ü§Ú, §Ö§ã§Ý§Ú §Þ§à§Õ§å§Ý§î §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§Ú §Ó§Ö§î-§ã§Ö§â§Ó§Ö§â§Ñ §Ù§Ñ§Õ§Ñ§ã§ä §Ü§à§â§â§Ö§Ü§ä§ß§à§Ö §Ú§Þ§ñ §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§ñ §Ó$_SERVER §á§Ö§â§Ö§Þ§Ö§ß§ß§à§Û.§±§à§Õ§Õ§Ö§â§Ø§Ú§Ó§Ñ§Ö§Þ§í§Þ§Ú §Ü§Ý§ð§é§Ñ§Þ§Ú $_SERVER §ñ§Ó§Ý§ñ§ð§ä§ã§ñ PHP_AUTH_USER , REMOTE_USER , AUTH_USER . |
§µ§Õ§Ñ§Ý§Ö§ß§Ú§Ö §Ú§Þ§Ö§ß§Ú §Õ§à§Þ§Ö§ß§Ñ | §³§á§Ú§ã§à§Ü §Ú§Þ§×§ß §Õ§à§Þ§Ö§ß§à§Ó, §â§Ñ§Ù§Õ§Ö§Ý§×§ß§ß§í§ç §Ù§Ñ§á§ñ§ä§à§Û, §Ü§à§ä§à§â§í§Ö §ß§Ö§à§Ò§ç§à§Õ§Ú§Þ§à §å§Õ§Ñ§Ý§Ú§ä§î §ã §Ú§Þ§Ö§ß§Ú §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§ñ. §¯§Ñ§á§â§Ú§Þ§Ö§â, §Ü§à§Þ§á§Ñ§ß§Ú§ñ,§Ý§ð§Ò§Ñ§ñ - §Ö§ã§Ý§Ú §Ú§Þ§Ö§ß§Ö§Þ §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§ñ §ñ§Ó§Ý§ñ§Ö§ä§ã§ñ 'Admin@§Ý§ð§Ò§Ñ§ñ', '§Ü§à§Þ§á§Ñ§ß§Ú§ñ\Admin', §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§î §Ó§í§á§à§Ý§ß§Ú§ä §Ó§ç§à§Õ §Ü§Ñ§Ü 'Admin'; §Ö§ã§Ý§Ú §Ú§Þ§ñ §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§ñ '§ß§Ö§Ü§à§Þ§á§Ñ§ß§Ú§ñ\Admin', §Ó§ç§à§Õ §Ó §ã§Ú§ã§ä§Ö§Þ§å §Ò§å§Õ§Ö§ä §Ù§Ñ§á§â§Ö§ë§×§ß. |
§²§Ö§Ô§Ú§ã§ä§â§à§Ù§Ñ§Ó§Ú§ã§Ú§Þ§à§Ö §Ú§Þ§ñ §Ó§ç§à§Õ§Ñ | §µ§Ò§Ö§â§Ú§ä§Ö §à§ä§Þ§Ö§ä§Ü§å, §é§ä§à§Ò§í §à§ä§Ü§Ý§ð§é§Ú§ä§î §é§å§Ó§ã§ä§Ó§Ú§ä§Ö§Ý§î§ß§í§Û §Ü §â§Ö§Ô§Ú§ã§ä§â§å §Ó§ç§à§Õ (§Ñ§Ü§ä§Ú§Ó§Ú§â§à§Ó§Ñ§ß §á§à §å§Þ§à§Ý§é§Ñ§ß§Ú§ð) §Õ§Ý§ñ §Ú§Þ§×§ß §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ñ§Ý§Ö§Û. §¯§Ñ§á§â§Ú§Þ§Ö§â, §à§ä§Ü§Ý§ð§é§Ú§ä§Ö §é§å§Ó§ã§ä§Ó§Ú§ä§Ö§Ý§î§ß§í§Û §Ü §â§Ö§Ô§Ú§ã§ä§â§å §Ó§ç§à§Õ §Ú §Ó§ç§à§Õ§Ú§ä§Ö, §ß§Ñ§á§â§Ú§Þ§Ö§â, §Ü§Ñ§Ü 'ADMIN' §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§î §Õ§Ñ§Ø§Ö, §Ö§ã§Ý§Ú Áú»¢¶Ä²© §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§î 'Admin'. §°§Ò§â§Ñ§ä§Ú§ä§Ö §Ó§ß§Ú§Þ§Ñ§ß§Ú§Ö, §é§ä§à §ß§Ö §é§å§Ó§ã§ä§Ó§Ú§ä§Ö§Ý§î§ß§í§Û §Ü §â§Ö§Ô§Ú§ã§ä§â§å §Ó§ç§à§Õ §Ò§å§Õ§Ö§ä §Ù§Ñ§Ò§Ý§à§Ü§Ú§â§à§Ó§Ñ§ß, §Ö§ã§Ý§Ú §Ó §Ò§Ñ§Ù§Ö §Õ§Ñ§ß§ß§í§ç Áú»¢¶Ä²© §ã§å§ë§Ö§ã§ä§Ó§å§ð§ä §ß§Ö§ã§Ü§à§Ý§î§Ü§à §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§Ö§Û §ã §à§Õ§Ú§ß§Ñ§Ü§à§Ó§í§Þ§Ú §á§ã§Ö§Ó§Õ§à§ß§Ú§Þ§Ñ§Þ§Ú (§ß§Ñ§á§â§Ú§Þ§Ö§â: Admin, admin). |
§£ §ã§Ý§å§é§Ñ§Ö §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§Ú §ß§Ñ §Ò§Ñ§Ù§Ö §Ó§Ö§Ò-§ã§Ö§â§Ó§Ö§â§Ñ §Ó§ã§Ö §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§Ú (§Õ§Ñ§Ø§Ö §ã §Õ§à§ã§ä§å§á§à§Þ §Ü §Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã§å §ã§à §Ù§ß§Ñ§é§Ö§ß§Ú§Ö§Þ §£§ß§å§ä§â§Ö§ß§ß§Ú§Û) §Ò§å§Õ§å§ä §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§è§Ú§â§à§Ó§Ñ§ä§î§ã§ñ §Ó§Ö§Ò-§ã§Ö§â§Ó§Ö§â§à§Þ, §Ñ §ß§Ö Áú»¢¶Ä²©!
§¥§Ý§ñ §Ó§ß§å§ä§â§Ö§ß§ß§Ú§ç §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§Ö§Û, §Ü§à§ä§à§â§í§Ö §ß§Ö §ã§Þ§à§Ô§Ý§Ú §Ó§í§á§à§Ý§ß§Ú§ä§î §Ó§ç§à§Õ §ã §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ß§Ú§Ö§Þ §å§é§×§ä§ß§í§ç §Õ§Ñ§ß§ß§í§ç HTTP (§ã HTTP §Õ§Ú§Ñ§Ý§à§Ô§à§Þ §Ó§ç§à§Õ§Ñ §Ó §ã§Ú§ã§ä§Ö§Þ§å §á§à §å§Þ§à§Ý§é§Ñ§ß§Ú§ð), §Ü§à§ä§à§â§Ñ§ñ §á§â§Ú§Ó§à§Õ§Ú§ä §Ü 401 §à§ê§Ú§Ò§Ü§Ö, §Ó§í §Ó§à§Ù§Þ§à§Ø§ß§à §Ù§Ñ§ç§à§ä§Ú§ä§Ö §Õ§à§Ò§Ñ§Ó§Ú§ä§î §ã§ä§â§à§Ü§å ErrorDocument 401 /index.php?form=default
§Ü §Õ§Ú§â§Ö§Ü§ä§Ú§Ó§Ñ§Þ §á§â§à§ã§ä§à§Û §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§Ú, §Ü§à§ä§à§â§Ñ§ñ §Ó§á§à§ã§Ý§Ö§Õ§ã§ä§Ó§Ú§Ú §á§â§Ú§Ó§Ö§Õ§×§ä §Ü §à§Ò§í§é§ß§à§Þ§å §Õ§Ú§Ñ§Ý§à§Ô§å Áú»¢¶Ä²© §Ó§ç§à§Õ§Ñ §Ó §ã§Ú§ã§ä§Ö§Þ§å.
§®§à§Ø§ß§à §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ä§î §Ó§ß§Ö§ê§ß§ð§ð §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§ð LDAP §Õ§Ý§ñ §á§â§à§Ó§Ö§â§Ü§Ú §Ú§Þ§Ö§ß §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§Ö§Û §Ú §á§Ñ§â§à§Ý§Ö§Û. §°§Ò§â§Ñ§ä§Ú§ä§Ö §Ó§ß§Ú§Þ§Ñ§ß§Ú§Ö, §é§ä§à §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§î §ä§Ñ§Ü§Ø§Ö §Õ§à§Ý§Ø§Ö§ß §ã§å§ë§Ö§ã§ä§Ó§à§Ó§Ñ§ä§î §Ó Áú»¢¶Ä²©, §à§Õ§ß§Ñ§Ü§à §Ö§Ô§à §á§Ñ§â§à§Ý§î §Ú§Ù Áú»¢¶Ä²© §ß§Ö §Ò§å§Õ§Ö§ä §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ä§î§ã§ñ.
§·§à§ä§ñ LDAP §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§ñ §Ù§Ñ§Õ§Ñ§Ö§ä§ã§ñ §Ô§Ý§à§Ò§Ñ§Ý§î§ß§à §ß§Ö§Ü§à§ä§à§â§í§Ö §Ô§â§å§á§á§í §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§Ö§Û §Þ§à§Ô§å§ä §Ó§ã§× §Ö§ë§Ö §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§è§Ú§â§à§Ó§Ñ§ä§î§ã§ñ §ã §á§à§Þ§à§ë§î Áú»¢¶Ä²©. §µ §ï§ä§Ú§ç §Ô§â§å§á§á §Õ§à§ã§ä§å§á §Ü §Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã§å §Õ§à§Ý§Ø§Ö§ß §Ò§í§ä§î §Ù§Ñ§Õ§Ñ§ß §Ù§ß§Ñ§é§Ö§ß§Ú§Ö§Þ §£§ß§å§ä§â§Ö§ß§ß§Ú§Û. §ª §ß§Ñ§à§Ò§à§â§à§ä, §Ö§ã§Ý§Ú §Ô§Ý§à§Ò§Ñ§Ý§î§ß§à §Ú§ã§á§à§Ý§î§Ù§å§Ö§ä§ã§ñ §Ó§ß§å§ä§â§Ö§ß§ß§ñ§ñ §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§ñ, §Õ§Ö§ä§Ñ§Ý§Ú LDAP §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§Ú §Þ§à§Ø§ß§à §Ù§Ñ§Õ§Ñ§ä§î §Ú §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ä§î §á§à §à§ä§Õ§Ö§Ý§î§ß§í§Þ §Ô§â§å§á§á§Ñ§Þ §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§Ö§Û §å §Ü§à§ä§à§â§í§ç §Õ§à§ã§ä§å§á §Ü §Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã§å §Ù§Ñ§Õ§Ñ§ß §Ù§ß§Ñ§é§Ö§ß§Ú§Ö§Þ LDAP.
§¡§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§ñ Áú»¢¶Ä²© LDAP §â§Ñ§Ò§à§ä§Ñ§Ö§ä §á§à §Ü§â§Ñ§Û§ß§Ö§Û §Þ§Ö§â§Ö §ã Microsoft Active Directory §Ú OpenLDAP.
§±§Ñ§â§Ñ§Þ§Ö§ä§â§í §ß§Ñ§ã§ä§â§à§Ö§Ü:
§±§Ñ§â§Ñ§Þ§Ö§ä§â | §°§á§Ú§ã§Ñ§ß§Ú§Ö |
---|---|
§¡§Ü§ä§Ú§Ó§Ñ§è§Ú§ñ LDAP §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§Ú | §°§ä§Þ§Ö§ä§î§ä§Ö, §é§ä§à§Ò§í §Ñ§Ü§ä§Ú§Ó§Ú§â§à§Ó§Ñ§ä§î LDAP §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§ð. |
§·§à§ã§ä LDAP | §ª§Þ§ñ LDAP §ã§Ö§â§Ó§Ö§â§Ñ. §¯§Ñ§á§â§Ú§Þ§Ö§â: ldap://ldap.zabbix.com §ª§ã§á§à§Ý§î§Ù§å§Û§ä§Ö §á§â§à§ä§à§Ü§à§Ý ldaps §Õ§Ý§ñ §Ò§Ö§Ù§à§á§Ñ§ã§ß§à§Ô§à LDAP §ã§Ö§â§Ó§Ö§â§Ñ. ldaps://ldap.zabbix.com §±§â§Ú §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ß§Ú§Ú OpenLDAP 2.x.x §Ú §Ò§à§Ý§Ö§Ö §á§à§Ù§Õ§ß§Ú§ç §Þ§à§Ø§ß§à §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ä§î §á§à§Ý§ß§í§Û LDAP URI §Ó §æ§à§â§Þ§Ö ldap://§Ú§Þ§ñ§ç§à§ã§ä§Ñ:§á§à§â§ä §Ú§Ý§Ú ldaps://§Ú§Þ§ñ§ç§à§ã§ä§Ñ:§á§à§â§ä. |
§±§à§â§ä | §±§à§â§ä LDAP §ã§Ö§â§Ó§Ö§â§Ñ. §±§à §å§Þ§à§Ý§é§Ñ§ß§Ú§ð 389. §¥§Ý§ñ §Ò§Ö§Ù§à§á§Ñ§ã§ß§à§Ô§à §á§à§Õ§Ü§Ý§ð§é§Ö§ß§Ú§ñ §Ü LDAP §à§Ò§í§é§ß§à §Ú§ã§á§à§Ý§î§Ù§å§Ö§ä§ã§ñ §ß§à§Þ§Ö§â §á§à§â§ä§Ñ 636. §¯§Ö §Ú§ã§á§à§Ý§î§Ù§å§Ö§ä§ã§ñ §á§â§Ú §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ß§Ú§Ú §á§à§Ý§ß§í§ç LDAP URI. |
§¢§Ñ§Ù§Ñ §Õ§Ý§ñ §á§à§Ú§ã§Ü§Ñ (BaseDN) | §¢§Ñ§Ù§à§Ó§í§Û §á§å§ä§î §Õ§Ý§ñ §á§à§Ú§ã§Ü§Ñ §Ñ§Ü§Ü§Ñ§å§ß§ä§à§Ó: ou=Users,ou=system (§Ó OpenLDAP), DC=company,DC=com (§Ó Microsoft Active Directory) |
§¡§ä§â§Ú§Ò§å§ä §á§à§Ú§ã§Ü§Ñ | §¡§ä§â§Ú§Ò§å§ä LDAP §Ñ§Ü§Ü§Ñ§å§ß§ä§Ñ, §Ü§à§ä§à§â§í§Û §ß§Ö§à§Ò§ç§à§Õ§Ú§Þ§à §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ä§î §Õ§Ý§ñ §á§à§Ú§ã§Ü§Ñ: uid (§Ó OpenLDAP), sAMAccountName (§Ó Microsoft Active Directory) |
§ª§Þ§ñ §Õ§Ý§ñ §á§à§Õ§Ü§Ý§ð§é§Ö§ß§Ú§ñ (Bind DN) | LDAP §Ñ§Ü§Ü§Ñ§å§ß§ä §Õ§Ý§ñ §Ó§í§á§à§Ý§ß§Ö§ß§Ú§ñ §á§à§Õ§Ü§Ý§ð§é§Ö§ß§Ú§ñ §Ú §á§à§Ú§ã§Ü§Ñ §ß§Ñ LDAP §ã§Ö§â§Ó§Ö§â§Ö, §á§â§Ú§Þ§Ö§â§í: uid=ldap_search,ou=system (§Ó OpenLDAP), CN=ldap_search,OU=user_group,DC=company,DC=com (§Ó Microsoft Active Directory) §¡§ß§à§ß§Ú§Þ§ß§à§Ö §á§à§Õ§Ü§Ý§ð§é§Ö§ß§Ú§Ö §ä§Ñ§Ü§Ø§Ö §á§à§Õ§Õ§Ö§â§Ø§Ú§Ó§Ñ§Ö§ä§ã§ñ. |
§²§Ö§Ô§Ú§ã§ä§â§à§Ù§Ñ§Ó§Ú§ã§Ú§Þ§à§Ö §Ú§Þ§ñ §Ó§ç§à§Õ§Ñ | §µ§Ò§Ö§â§Ú§ä§Ö §à§ä§Þ§Ö§ä§Ü§å, §é§ä§à§Ò§í §à§ä§Ü§Ý§ð§é§Ú§ä§î §é§å§Ó§ã§ä§Ó§Ú§ä§Ö§Ý§î§ß§í§Û §Ü §â§Ö§Ô§Ú§ã§ä§â§å §Ó§ç§à§Õ (§Ñ§Ü§ä§Ú§Ó§Ú§â§à§Ó§Ñ§ß §á§à §å§Þ§à§Ý§é§Ñ§ß§Ú§ð) §Õ§Ý§ñ §Ú§Þ§×§ß §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§Ö§Û. §¯§Ñ§á§â§Ú§Þ§Ö§â, §à§ä§Ü§Ý§ð§é§Ú§ä§Ö §é§å§Ó§ã§ä§Ó§Ú§ä§Ö§Ý§î§ß§í§Û §Ü §â§Ö§Ô§Ú§ã§ä§â§å §Ó§ç§à§Õ §Ú §Ó§ç§à§Õ§Ú§ä§Ö, §ß§Ñ§á§â§Ú§Þ§Ö§â, §Ü§Ñ§Ü 'ADMIN' §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§î §Õ§Ñ§Ø§Ö, §Ö§ã§Ý§Ú Áú»¢¶Ä²© §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§î 'Admin'. §°§Ò§â§Ñ§ä§Ú§ä§Ö §Ó§ß§Ú§Þ§Ñ§ß§Ú§Ö, §é§ä§à §ß§Ö §é§å§Ó§ã§ä§Ó§Ú§ä§Ö§Ý§î§ß§í§Û §Ü §â§Ö§Ô§Ú§ã§ä§â§å §Ó§ç§à§Õ §Ò§å§Õ§Ö§ä §Ù§Ñ§Ò§Ý§à§Ü§Ú§â§à§Ó§Ñ§ß, §Ö§ã§Ý§Ú §Ó §Ò§Ñ§Ù§Ö §Õ§Ñ§ß§ß§í§ç Áú»¢¶Ä²© §ã§å§ë§Ö§ã§ä§Ó§å§ð§ä §ß§Ö§ã§Ü§à§Ý§î§Ü§à §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§Ö§Û §ã §à§Õ§Ú§ß§Ñ§Ü§à§Ó§í§Þ§Ú §á§ã§Ö§Ó§Õ§à§ß§Ú§Þ§Ñ§Þ§Ú (§ß§Ñ§á§â§Ú§Þ§Ö§â: Admin, admin). |
§±§Ñ§â§à§Ý§î §á§à§Õ§Ü§Ý§ð§é§Ö§ß§Ú§ñ (Bind password) | §±§Ñ§â§à§Ý§î LDAP §Ñ§Ü§Ü§Ñ§å§ß§ä§Ñ §Õ§Ý§ñ §Ó§í§á§à§Ý§ß§Ö§ß§Ú§ñ §á§à§Õ§Ü§Ý§ð§é§Ö§ß§Ú§ñ §Ú §á§à§Ú§ã§Ü§Ñ §ß§Ñ LDAP §ã§Ö§â§Ó§Ö§â§Ö. |
§´§Ö§ã§ä §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§Ú | §©§Ñ§Ô§à§Ý§à§Ó§à§Ü §â§Ñ§Ù§Õ§Ö§Ý§Ñ §ä§Ö§ã§ä§Ú§â§à§Ó§Ñ§ß§Ú§ñ |
§£§ç§à§Õ §Ó §ã§Ú§ã§ä§Ö§Þ§å | §ª§Þ§ñ §ä§Ö§ã§ä§à§Ó§à§Ô§à §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§ñ (§Ü§à§ä§à§â§í§Û §Ó§í§á§à§Ý§ß§Ú§Ý §Ó§ç§à§Õ §Ó §Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã Áú»¢¶Ä²©). §¿§ä§à §Ú§Þ§ñ §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§ñ §Õ§à§Ý§Ø§ß§à §ã§å§ë§Ö§ã§ä§Ó§à§Ó§Ñ§ä§î §ß§Ñ LDAP §ã§Ö§â§Ó§Ö§â§Ö. Áú»¢¶Ä²© §ß§Ö §Ñ§Ü§ä§Ú§Ó§Ú§â§å§Ö§ä LDAP §Ñ§å§ä§Ö§ß§ä§Ú§æ§Ú§Ü§Ñ§è§Ú§ð, §Ö§ã§Ý§Ú §ß§Ö §å§Õ§Ñ§Ö§ä§ã§ñ §Ñ§Ó§ä§à§â§Ú§Ù§à§Ó§Ñ§ä§î §ä§Ö§ã§ä§à§Ó§à§Ô§à §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§ñ. |
§±§Ñ§â§à§Ý§î §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§ñ | §±§Ñ§â§à§Ý§î LDAP §Ü §ä§Ö§ã§ä§à§Ó§à§Þ§å §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§ð. |
§£ §ã§Ý§å§é§Ñ§Ö §á§â§à§Ò§Ý§Ö§Þ §ã §ã§Ö§â§ä§Ú§æ§Ú§Ü§Ñ§ä§Ñ§Þ§Ú, §é§ä§à§Ò§í §Ù§Ñ§â§Ñ§Ò§à§ä§Ñ§Ý§à §Ò§Ö§Ù§à§á§Ñ§ã§ß§à§Ö §ã§à§Ö§Õ§Ú§ß§Ö§ß§Ú§Ö LDAP (ldaps), §Ó§Ñ§Þ §Ó§à§Ù§Þ§à§Ø§ß§à §á§à§ä§â§Ö§Ò§å§Ö§ä§ã§ñ §Õ§à§Ò§Ñ§Ó§Ú§ä§î TLS_REQCERT allow
§ã§ä§â§à§Ü§å §Ó §æ§Ñ§Û§Ý §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú§Ú /etc/openldap/ldap.conf. §¿§ä§Ñ §ß§Ñ§ã§ä§â§à§Û§Ü§Ñ §Þ§à§Ø§Ö§ä §ã§ß§Ú§Ù§Ú§ä§î §å§â§à§Ó§Ö§ß§î §Ò§Ö§Ù§à§á§Ñ§ã§ß§à§ã§ä§Ú §á§à§Õ§Ü§Ý§ð§é§Ö§ß§Ú§ñ §Ü LDAP §Ü§Ñ§ä§Ñ§Ý§à§Ô§å.
§²§Ö§Ü§à§Þ§Ö§ß§Õ§å§Ö§ä§ã§ñ §ã§à§Ù§Õ§Ñ§ä§î §à§ä§Õ§Ö§Ý§î§ß§í§Û LDAP §Ñ§Ü§Ü§Ñ§å§ß§ä (§ª§Þ§ñ §Õ§Ý§ñ §á§à§Õ§Ü§Ý§ð§é§Ö§ß§Ú§ñ (Bind DN)), §é§ä§à§Ò§í §á§à§Õ§Ü§Ý§ð§é§Ñ§ä§î§ã§ñ §Ú §Ú§ã§Ü§Ñ§ä§î §ß§Ñ LDAP §ã§Ö§â§Ó§Ö§â§Ö §ã §Þ§Ú§ß§Ú§Þ§Ñ§Ý§î§ß§í§Þ§Ú §á§â§Ú§Ó§Ú§Ý§Ö§Ô§Ú§ñ§Þ§Ú §Ó LDAP, §Ó§Þ§Ö§ã§ä§à §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ß§Ú§ñ §â§Ö§Ñ§Ý§î§ß§í§ç §Ñ§Ü§Ü§Ñ§å§ß§ä§à§Ó §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§Ö§Û (§Ú§ã§á§à§Ý§î§Ù§å§Ö§Þ§í§Ö §Õ§Ý§ñ §Ó§ç§à§Õ§Ñ §Ó §Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã Áú»¢¶Ä²©).
§´§Ñ§Ü§à§Û §á§à§Õ§ç§à§Õ §Ò§à§Ý§Ö§Ö §Ò§Ö§Ù§à§á§Ñ§ã§ß§í§Û §Ú §ß§Ö §á§à§ä§â§Ö§Ò§å§Ö§ä §Ú§Ù§Þ§Ö§ß§Ö§ß§Ú§ñ §±§Ñ§â§à§Ý§î §á§à§Õ§Ü§Ý§ð§é§Ö§ß§Ú§ñ (Bind password), §Ö§ã§Ý§Ú §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§î §Ú§Ù§Þ§Ö§ß§Ú§ä §ã§Ó§à§Û §ã§à§Ò§ã§ä§Ó§Ö§ß§ß§í§Û §á§Ñ§â§à§Ý§î §ß§Ñ LDAP §ã§Ö§â§Ó§Ö§â§Ö.
§£ §ä§Ñ§Ò§Ý§Ú§è§Ö §á§â§Ö§Õ§ã§ä§Ñ§Ó§Ý§Ö§ß§ß§à§Û §Ó§í§ê§Ö §ï§ä§à §Ú§Þ§ñ §Ñ§Ü§Ü§Ñ§å§ß§ä§Ñ ldap_search.