Clean Up:
After going through this exercise, several aspects of the software configuration needed cleaning up.
- phpldapadmin: Generic: User Account password hash defaults to md5
- phpldapadmin: Template Warnings of Attributes and Schemas not configured
- Sendmail.schema: Include sendmail.schema to slapd.conf
- Samba.schema: Include samba.schema to slapd.conf
Generic User Account:
In phpldapadmin, the default Generic: User Account password hash defaults to md5.
To change the default password hash of md5 to ssha. Locate the following in /usr/local/www/phpldapadmin/config/config.php:
/* Default password hashing algorithm. One of md5, ssha, sha, md5crpyt, smd5,
blowfish, crypt or leave blank for now default algorithm. */
// $servers->setValue('appearance','password_hash_custom','md5');
Then, uncomment the following and change “md5” to “ssha”:
/* Default password hashing algorithm. One of md5, ssha, sha, md5crpyt, smd5,
blowfish, crypt or leave blank for now default algorithm. */
$servers->setValue('appearance','password_hash_custom','ssha');
Now, the default password hash is set to ssha.
Template Warnings:
When logging into phpldapadmin, the user is give template warning messages like this:
To prevent the offending messages from appearing locate the following in /usr/local/www/phpldapadmin/config/config.php:
/* Hide the warnings for invalid objectClasses/attributes in templates. */ // $config->custom->appearance['hide_template_warning'] = false;
Then, uncomment the following and change “false” to “true”:
/* Hide the warnings for invalid objectClasses/attributes in templates. */ $config->custom->appearance['hide_template_warning'] = true;
Now, the annoying template messages will not appear!
Sendmail and Samba Schemas:
As Sendmail is the default MTU in FreeBSD and available for my users, I included the sendmail.schema in /usr/local/etc/openldap/slapd.conf file. Also, the need for Samba in the future, the samba.schema was downloaded from samba.org and included in the slapd.conf file as shown below:
# # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # include /usr/local/etc/openldap/schema/core.schema include /usr/local/etc/openldap/schema/cosine.schema include /usr/local/etc/openldap/schema/inetorgperson.schema include /usr/local/etc/openldap/schema/nis.schema include /usr/local/etc/openldap/schema/sendmail.schema include /usr/local/etc/openldap/schema/samba.schema # Define global ACLs to disable default read access........
Summary:
As a project gets to completion, it is often a good idea to review the little issues and correct them as opposed to leaving them unfinished. Although none of the above affect the functionality of the project with the exception of the additional schemas, it is nice to have all the items completed. Hope you enjoyed this post!